last executing test programs: 3.378892744s ago: executing program 1 (id=4049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000f4405316c54a1c4193c95cfc173fb49c673e89ae6f7ec9c46878f0ceb3f96cbd343591e4e35eaca6124c105887dd8ff7110d0b535aa89a706147a2a3a24e5f3d925c145647eaef143631d53efe9640169a37947bc9c042d4f5a1e5fe26be6e79eecff2d61bb43c9cc351bd51151409bbb205689bd7b1d53cdd6bef3c1a5d98252dd1921d5b8fb1a2247f898a41611f0359a02e3e33a80fc5aadb168a2c3eca46bc8fb6f54b7f2722abf85a290420a0532f65012beca621916318956e", @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000"], 0x4c}}, 0x20000011) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000f4405316c54a1c4193c95cfc173fb49c673e89ae6f7ec9c46878f0ceb3f96cbd343591e4e35eaca6124c105887dd8ff7110d0b535aa89a706147a2a3a24e5f3d925c145647eaef143631d53efe9640169a37947bc9c042d4f5a1e5fe26be6e79eecff2d61bb43c9cc351bd51151409bbb205689bd7b1d53cdd6bef3c1a5d98252dd1921d5b8fb1a2247f898a41611f0359a02e3e33a80fc5aadb168a2c3eca46bc8fb6f54b7f2722abf85a290420a0532f65012beca621916318956e", @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000"], 0x4c}}, 0x20000011) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.378140847s ago: executing program 3 (id=4050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.238582745s ago: executing program 3 (id=4052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f00000001c0)='\x00', 0x2000, &(0x7f0000000280)={@_ha_fsid={[0x0, 0x2]}, {0xff01, 0x4, 0x5, 0x3}}, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_USERDATA={0x38, 0x7, 0x1, 0x0, "25e634b1d421f36436d1bd53635b2aec630473dc293fc359529a05f3edff835046bd07a354bd331574beeb96da5234c2cf6cdbca"}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) (async) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f00000001c0)='\x00', 0x2000, &(0x7f0000000280)={@_ha_fsid={[0x0, 0x2]}, {0xff01, 0x4, 0x5, 0x3}}, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4}) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, 0x0, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_USERDATA={0x38, 0x7, 0x1, 0x0, "25e634b1d421f36436d1bd53635b2aec630473dc293fc359529a05f3edff835046bd07a354bd331574beeb96da5234c2cf6cdbca"}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) (async) 3.054593605s ago: executing program 1 (id=4055): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x130, 0x12, 0x0, 0x1, [{0x12c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x110, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x109, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x800) (rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x47, 0x1}]}}, 0x0, 0x2a, 0x0, 0x3}, 0x28) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x70}}, 0x0) 3.032978328s ago: executing program 3 (id=4056): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="7e78c97701311ca5013a6aa7138f94a67cb18332e91006d86bd19bb295c5c7239401925b821c1be7f7c83dd676f7", 0x2e) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524f794b5edc67608616d924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae010cd12d01e1bbf73405af", 0x4, 0x7f, 0x1, 0x8a, 0xaa}}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0x7, 0x3}]}, 0x10) close(r4) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.951011907s ago: executing program 0 (id=4057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) 2.781457427s ago: executing program 1 (id=4058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="272d5a7bc3bced3ebb1bfba8a3064b81c06655167d01a580bfbce19a4ec168a31d3b84b195fd444a1716b4949bb1c05b8d9308f2f9be329b9fcb5a1a9304bc8b1c10ae872222164fb5de153747fd3d18305280533c1011d0ea8469d3499f519593056d527f895c6a8b07c8d31dfc0a543cfc281c624872f0a0fc7ef80b06b80c8644ee34e27eaae3e2096480388568131b83f346854f2c73ebb6672989d512284eed896623f4804797adb5456442847a1cf7d9f37d69a44a5dfa130e72cfebd4b830c1bbfb4b", @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES64=r5, @ANYRESOCT=r1, @ANYRES8=r0, @ANYBLOB="4e972fc14e2b83a386819938fee76bfe6b405419b7cd3dff6956e1caf948dd5fbdf85b0db66ad08a05ba947b023592f213887c8f01ed5c1361ea8a92bfd6deaa95a27ebdd6a46c8146643548041bf94d9c0c9d39a73695642fb6692edda109afe435c0fe31d830998a92fac03f6dbc5df52d71272d1d7b67b40edfced9d2c6d5d276cfc373c19aab78496014359f6ad34e6cc0d52977c08249336e6d08", @ANYRES64=r5], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.462073479s ago: executing program 1 (id=4060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r2, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80000) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000240)={@empty, @multicast2, @remote}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'dvmrp0\x00'}) poll(&(0x7f0000000400), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280c371c5a5b770063907a1d83467080001007369740014000280080002"], 0x40}}, 0x0) 2.421420454s ago: executing program 4 (id=4061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x188, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x340}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x82}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x100, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x1400}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc00c000}, 0x40080) syz_emit_ethernet(0xe7, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000d900000000fd019078ac1e0001ac1414aa03059078000500014f2406860067fff9072f1000e0000001640101024404c7c34414f221ac1e000100000000ffffffff000000061e0001ac1414aae0000001ac1414bbac1414ae831bf7ac1414bbe00000020a010102e0000002e0000001ac1414354420b3d0000000020000000d0000000880000001ffffffff000000050000b2a0832f7100000000ac1414aae0000002ac141441ac1414aaac141432e0000002ac141415640101000a010102ac141439000000bc85e4f039ebf434fe6d51ad0e69b6"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x24, 0x0, 0x428, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000140)=0x10, 0x80800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000700)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 2.122363749s ago: executing program 0 (id=4063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.115962243s ago: executing program 4 (id=4064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c00", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.954897915s ago: executing program 2 (id=4065): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.566373698s ago: executing program 0 (id=4066): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000005000000000000000000007eff59f4d189bb4a7639a960a61bd3040000008dbdca030059cd563839d686e0b26b0598edcecdedc675251152382d54d9b4c48e5f264db579019e87598fddc432ead48dd3efebf952777e642fbf9823865b3579ea47f8652a4bd7d893cb03addcb262c068db344cb9c1dfc046ab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ff07000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000080)={&(0x7f0000000000)=[{0xfad, 0xd, 0x800000, 0x3}, {0x4a0, 0x5, 0x8, 0x6}, {0x2, 0x5, 0x3, 0xffffffff}, {0x1, 0xd, 0xfffffffffffffff8, 0x2}], 0x4, 0x20, 0x7b8d, 0x7ff}) 1.565742414s ago: executing program 4 (id=4067): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/200, 0xc8, 0x0, &(0x7f0000000340)=""/162, 0xa2}, &(0x7f0000000440)=0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000093c900080001000100000008000a0014d6a78550a1b56810b51217c0d0ebad7cbbda4ea178022390eb0f5d9e86e94ba30000a3b294b97951b783b10dbd3e8785", @ANYRES32, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.451541078s ago: executing program 2 (id=4068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) accept$inet6(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) (async) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 1.359977202s ago: executing program 3 (id=4069): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x1, 0x7, 0x1, 0x0}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000880)={0x9, 0xc1, 0x200, 0x6, 0x0, 0x9, 0x1, 0x45, r1}, &(0x7f0000000a40)=0x20) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@delchain={0x54, 0x66, 0xf31, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe8, 0xfff3}, {0xfff1, 0x2}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x35}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000280)=@newqdisc={0x248, 0x24, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffe, 0x9}, {0xfff3, 0x5}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x69f6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0x8, 0x7, 0x0, 0x1, 0x6, 0x9}}, {0x16, 0x2, [0x0, 0x5, 0xd, 0x8001, 0x101, 0xffff, 0xb, 0x3, 0x9]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0xfff8, 0x40f, 0x1, 0x7f, 0x9ba, 0x8}}, {0x14, 0x2, [0x81, 0x6, 0x10, 0x6, 0x2, 0x1, 0x3, 0x7]}}, {{0x1c, 0x1, {0x3, 0xf7, 0x1, 0x15b8000, 0x0, 0x9, 0x2c, 0x7}}, {0x12, 0x2, [0xf, 0x1, 0x2, 0x5, 0x5, 0x9, 0x10]}}, {{0x1c, 0x1, {0x7, 0x6, 0xf800, 0x311b, 0x2, 0x17b2, 0x7fff, 0x2}}, {0x8, 0x2, [0x3, 0xa]}}, {{0x1c, 0x1, {0x75, 0x7, 0x0, 0x4, 0x2, 0x7fffffff, 0xe18e, 0x2}}, {0x8, 0x2, [0x2, 0x80]}}, {{0x1c, 0x1, {0xff, 0x3, 0xffff, 0xff, 0x0, 0xfffffffc, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x0, 0xff, 0x3]}}, {{0x1c, 0x1, {0x0, 0x6, 0x5, 0x1, 0x2, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}]}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe4, 0x0, 0x10000, 0x0, 0x6, 0x7fff, 0x6}}, {0x10, 0x2, [0x81, 0x5, 0xfff, 0x41b, 0xfffd, 0x3]}}, {{0x1c, 0x1, {0x0, 0x5, 0xa26d, 0x0, 0x0, 0x1, 0x2, 0x2}}, {0x8, 0x2, [0xd, 0xd]}}, {{0x1c, 0x1, {0x3, 0x10, 0x9, 0x1, 0x2, 0x101, 0xe0a3, 0x2}}, {0x8, 0x2, [0x6, 0xf0]}}, {{0x1c, 0x1, {0x1, 0x7, 0x7, 0x5, 0x0, 0x2, 0x5, 0x5}}, {0xe, 0x2, [0x950, 0x5, 0x0, 0x6, 0x2]}}, {{0x1c, 0x1, {0x8, 0x8, 0x2, 0x400, 0x0, 0x9, 0x867, 0x2}}, {0x8, 0x2, [0x1, 0x4e41]}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8848}, 0x80c0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000004240)={&(0x7f0000000580)=@isdn={0x22, 0x4, 0xc, 0xd3, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000007c0)="66e164ca8ed53cfd8199a7ef3363b36deb5010d29f7a1d1f9c2aed4166ca6e6cd28829af6c6ef79ead1c6b61b9270b8b5e455f5ff43d42", 0x37}, {&(0x7f0000000940)="f6ae4ca9272a74661ee3d6d873cddc9d1f6a19a3247663cb83475ef52c79d45de3eb97b850abc47dc6ff9b2b089103889e4eed76eb2ce9c702c0d763fa8b8aaecdd203a9a77ad0818617fbd6b6aa00d9957bc990d8258cd12155f521713e1535a3a6532b7ddedb64c0c4ac88744423d071320bbb484ae3c532a09c1e3013ac2982d55cf5dbf777db1859db2d41bec3c56c24173ba7e8935735aa8107f2e81fababedc0328c2e6bc58bd2472b808a948ba09e21531db522cb723436a9e13fcdaa51913824dd7b2ffb9e6d77918b25", 0xce}, {&(0x7f0000000540)}, {&(0x7f0000000a80)="2258dab9c454142cae16f388995024a9b076f1427565986dee3bf7c6e5f61588227a5a127917d2eeff0a054a10955fdcbb52f4f87cd1c73dc83198744af6239590cd67fd7a392b9c5aec184bae89ed0c330ce16339fc1ccd765069b4674f9226aa2e80f7e2ab99e95033b2800c64bdc10515c4d4178ce72500decb7e671dd44a1bf42a52669fe9b15ded354985e9b693e52a27", 0x93}, {&(0x7f0000000b40)="a785d4c491fa1139b149671801ca280b8cb502ff9453b4f872be773ccf58c8616e3225927c38917a19271ff304c53d05ba66977e113b205243378c5817d459cb813c", 0x42}, {&(0x7f0000000bc0)="01e6c208b61f57b19249e201145f6518ac448acd8418e286d27834d028b9e953db00dcd1ded4c58c92b802c528319fa8b5556a93bf1ad30ae1af7a1a6b856cd7e09e8d0f47519bf20cc17a9d1220e7eafc412f1055809312c5df49f7d56f9421fd8ba300fca6c8af706212d3868b95ab110cb3aac0cdf6aeccc7080e689adc86bf3ae2eca0791e5df236d8773aed127b56f5ce", 0x93}], 0x6, &(0x7f0000000540)}, 0x24000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0xf8, r11, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4d}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040050) 1.266345001s ago: executing program 0 (id=4070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.2658851s ago: executing program 4 (id=4071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.069914034s ago: executing program 0 (id=4072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0xfff}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0xfff}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf253600000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4990}, 0x40040) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf253600000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4990}, 0x40040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="68010000", @ANYRES16=r7, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x10004095}, 0x4041) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="68010000", @ANYRES16=r7, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x10004095}, 0x4041) 893.166317ms ago: executing program 2 (id=4073): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="250a0000000000006111a200000000009500000000000000058f278e762715e54ab71646f74c7bd2ca0df74aee414476f4023eee47af8fb63a32c5da291bff08816cc219e0e251938d6d15da73c2e42bd060f31ebefc622c2a4ae01add0aa592b3771861200000000000000000001000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async, rerun: 64) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) 742.261834ms ago: executing program 1 (id=4074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x6, 0x0, 0x2000000) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000006c0)={0x0, 0xb8, 0x1, [0xa274, 0x9f6, 0xa, 0x8, 0x8], [0x2, 0x1, 0x4, 0x2, 0x7, 0x40, 0x4, 0x31b73d8c, 0x9, 0x9, 0x7, 0xffff, 0x8, 0x8000000000000000, 0x7fffffff, 0x1, 0xd68, 0x7, 0xffffffffffffffff, 0x53a, 0xffffffffffffffff, 0x9, 0x8144, 0x3, 0xa, 0xfffffffffffffff3, 0xd, 0x9, 0x0, 0x8, 0x1, 0x3, 0x4, 0x7, 0x4, 0x3, 0x8, 0x2, 0x5, 0x2, 0x1, 0x0, 0xd, 0x3, 0x3642, 0xd0000000000, 0x7, 0xffffffffffffffff, 0x5, 0xe3e, 0x6, 0x8000000000000001, 0xe69, 0x1, 0x6e9, 0xaf53, 0x0, 0x5, 0x7ff, 0x9, 0x8, 0x400, 0x3, 0xfffffffffffffffb, 0x4, 0x4303, 0x6, 0x4, 0x7, 0x3, 0x0, 0x0, 0x1bda0000, 0x100000001, 0x0, 0x0, 0x6, 0x8, 0x7, 0xfffffffffffffffd, 0x5, 0x7e9, 0x1, 0x7, 0xc, 0x8, 0x8e, 0xc, 0x3c, 0xfff, 0x9, 0x4edb8e1d, 0x3, 0xe, 0x10001, 0xf49, 0x8000, 0xfffffffffffffff7, 0x2, 0x0, 0xa, 0xa, 0x3, 0x6, 0xb1, 0x81, 0x0, 0x3, 0x3, 0x0, 0x6, 0x8, 0x4ec7, 0x10001, 0x70, 0xff, 0x4, 0x3, 0x7, 0x100000001, 0xc000000000000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000cc0)={r5, 0x8, 0x6, 0x1}) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 717.107764ms ago: executing program 2 (id=4075): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6erspan0\x00', {0x3}, 0x9}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r0], 0x128}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 401.69364ms ago: executing program 4 (id=4076): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x6, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) 358.799209ms ago: executing program 0 (id=4077): r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/161, 0xa1}], 0x3, &(0x7f0000000740)=""/141, 0x8d}, 0x18060) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000300000000000008000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003600)={0x34, r5, 0x51b, 0x7, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r7, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r7, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r10, r10, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRESHEX=r0, @ANYRES8=r1, @ANYBLOB="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"], 0x23c}}, 0x4004000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRESHEX=r0, @ANYRES8=r1, @ANYBLOB="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"], 0x23c}}, 0x4004000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000003580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240072e0e75c37a71ccd7a2099e600001900010025bd7000ffdbdf25022080ccfd02c8060004000008001e0001000000a2b3cf44e23eb7b62a415b80708064e2065577fa7107"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240072e0e75c37a71ccd7a2099e600001900010025bd7000ffdbdf25022080ccfd02c8060004000008001e0001000000a2b3cf44e23eb7b62a415b80708064e2065577fa7107"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 355.534151ms ago: executing program 2 (id=4078): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/253, 0xfd) read(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00fb00"/20, @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r2, @ANYBLOB="180012800e00010077697265677561726400000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r4], 0x0, 0x45, 0x0, 0xfffffffe, 0xa}, 0x28) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)=""/254, &(0x7f0000000340)=0xfe) 233.993438ms ago: executing program 3 (id=4079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0xcf30b000) 230.004773ms ago: executing program 1 (id=4080): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) writev(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 86.440543ms ago: executing program 2 (id=4081): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x36, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa840, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @empty, @random="46df11d398d5", @remote, @random="df4d18811b21", @broadcast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}]}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_newaddr={0x3c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x10, 0x78, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x8003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) 2.566137ms ago: executing program 4 (id=4082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x5, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"b21361aae2b311236f80630a2f26d7b8", r2, r3, {0x8, 0x5}, {0x8, 0x800}, 0x6, [0x7fff, 0xc4, 0x7, 0x1, 0x10, 0x100000001, 0x5, 0x9, 0x6, 0x4, 0x5, 0x8, 0xa, 0xffffffffffffffff, 0xffffffffffffff00, 0x6]}) 0s ago: executing program 3 (id=4083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x88}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x631d66b5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8010}, 0x4040811) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4], 0x2c}}, 0x4000820) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0xff85}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5532, 0x0, 0x0, 0x0, 0x5d2}, @alu={0x7, 0x0, 0x5, 0xfd77f7c1f15e132e, 0x0, 0x118, 0x10}, @generic={0x9, 0x2, 0x8, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0xca, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0xf, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x88}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x631d66b5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8010}, 0x4040811) (async) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4], 0x2c}}, 0x4000820) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0xff85}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5532, 0x0, 0x0, 0x0, 0x5d2}, @alu={0x7, 0x0, 0x5, 0xfd77f7c1f15e132e, 0x0, 0x118, 0x10}, @generic={0x9, 0x2, 0x8, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0xca, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x29, 0xf, 0x0) (async) kernel console output (not intermixed with test programs): 71.626756][T16186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.190705][T16248] netlink: 'syz.3.2692': attribute type 12 has an invalid length. [ 372.224471][T16239] syzkaller0: entered promiscuous mode [ 372.237119][T16239] syzkaller0: entered allmulticast mode [ 372.413824][T16248] bond8: option primary_reselect: invalid value (255) [ 372.448130][T16248] bond8 (unregistering): Released all slaves [ 372.624188][T16274] netlink: 'syz.0.2697': attribute type 12 has an invalid length. [ 372.679329][T16261] syzkaller0: entered promiscuous mode [ 372.709101][T16261] syzkaller0: entered allmulticast mode [ 372.870602][T16283] sctp: [Deprecated]: syz.0.2700 (pid 16283) Use of int in maxseg socket option. [ 372.870602][T16283] Use struct sctp_assoc_value instead [ 373.348541][T16306] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 373.418856][T16307] Cannot find add_set index 4 as target [ 373.987918][T16334] netlink: 'syz.0.2713': attribute type 11 has an invalid length. [ 374.037419][T16334] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2713'. [ 374.078519][T16336] netlink: 'syz.4.2715': attribute type 11 has an invalid length. [ 374.112638][T16336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2715'. [ 374.339252][T16356] syzkaller1: entered promiscuous mode [ 374.362896][T16356] syzkaller1: entered allmulticast mode [ 374.616430][T16363] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 374.635807][T16366] team0: left allmulticast mode [ 374.645845][T16366] team_slave_0: left allmulticast mode [ 374.655320][T16363] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2722'. [ 374.666190][T16366] team_slave_1: left allmulticast mode [ 374.690503][T16366] team0: left promiscuous mode [ 374.717979][T16366] team_slave_0: left promiscuous mode [ 374.734014][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 374.747588][T16366] team_slave_1: left promiscuous mode [ 374.777285][T16366] bridge0: port 3(team0) entered disabled state [ 374.839624][T16366] bridge_slave_0: left promiscuous mode [ 374.866011][T16376] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 374.884511][T16366] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.939870][T16366] bridge_slave_1: left allmulticast mode [ 374.946761][T16366] bridge_slave_1: left promiscuous mode [ 374.966122][T16366] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.979917][T16366] bond8: (slave veth0_to_bond): Releasing active interface [ 374.990246][T16366] team0: Port device team_slave_0 removed [ 374.997976][T16366] team0: Port device team_slave_1 removed [ 375.004727][T16366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.017733][T16366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.027279][T16366] net_ratelimit: 55 callbacks suppressed [ 375.027296][T16366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.050696][T16360] bridge0: port 1(dummy0) entered blocking state [ 375.057932][T16360] bridge0: port 1(dummy0) entered disabled state [ 375.065749][T16360] dummy0: entered allmulticast mode [ 375.073917][T16360] dummy0: entered promiscuous mode [ 375.080185][T16360] bridge0: port 1(dummy0) entered blocking state [ 375.086666][T16360] bridge0: port 1(dummy0) entered forwarding state [ 375.115363][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 375.362388][T16392] netlink: 'syz.3.2730': attribute type 21 has an invalid length. [ 375.401564][T16392] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2730'. [ 375.431285][T16392] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2730'. [ 376.158261][T16420] bridge0: port 1(dummy0) entered disabled state [ 376.227872][T16426] netlink: 'syz.2.2739': attribute type 9 has an invalid length. [ 376.269852][T16393] netlink: 'syz.1.2727': attribute type 15 has an invalid length. [ 376.292653][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2727'. [ 376.327049][T16425] netlink: 'syz.1.2727': attribute type 11 has an invalid length. [ 376.536015][T16420] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 376.554027][T16413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.577903][T16413] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 376.593305][T16420] geneve2: left promiscuous mode [ 376.650188][T16420] vlan0: left promiscuous mode [ 376.659486][T16420] bond3: left promiscuous mode [ 376.668291][T16420] bond4: left promiscuous mode [ 376.687484][ T9357] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.697523][ T9357] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.707606][ T9357] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.717901][ T9357] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.737125][ T9357] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.783853][ T9357] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.013310][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 377.032362][T16413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.052847][T16413] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 377.092709][T16413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.132638][T16413] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 377.168338][T16413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.194244][T16413] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 377.489125][T16455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2748'. [ 377.527466][T16457] xt_hashlimit: invalid rate [ 377.804717][T16468] can: request_module (can-proto-0) failed. [ 377.854444][T16466] sctp: [Deprecated]: syz.1.2753 (pid 16466) Use of int in maxseg socket option. [ 377.854444][T16466] Use struct sctp_assoc_value instead [ 377.931967][T16466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2753'. [ 378.322890][T16490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.695826][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.809145][T16515] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 378.975359][T16515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.084630][T16522] vlan3: entered promiscuous mode [ 379.113402][T16522] bond7: entered promiscuous mode [ 379.132608][T16522] vlan3: entered allmulticast mode [ 379.142702][T16535] __nla_validate_parse: 34 callbacks suppressed [ 379.142722][T16535] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2766'. [ 379.158521][T16522] bond7: entered allmulticast mode [ 379.318345][T16526] bond7: (slave bridge7): making interface the new active one [ 379.366687][T16526] bridge7: entered promiscuous mode [ 379.393456][T16526] bridge7: entered allmulticast mode [ 379.428911][T16526] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 379.465728][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 379.856950][T16564] яяяяяя: renamed from virt_wifi0 [ 380.126231][T16581] netlink: 'syz.3.2780': attribute type 16 has an invalid length. [ 380.136141][T16581] netlink: 'syz.3.2780': attribute type 3 has an invalid length. [ 380.154195][T16581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'. [ 380.168909][T16583] tipc: Failed to remove unknown binding: 66,0,0/2186795640:405888809/405888810 [ 380.204672][T16583] tipc: Failed to remove unknown binding: 66,0,0/2186795640:405888809/405888810 [ 380.239965][T16583] netlink: 'syz.1.2781': attribute type 3 has an invalid length. [ 380.261670][T16583] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2781'. [ 380.452529][T16596] netlink: 600 bytes leftover after parsing attributes in process `syz.1.2784'. [ 380.544043][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'. [ 380.709312][T16606] tunl0: entered promiscuous mode [ 380.725958][T16606] netlink: 'syz.4.2787': attribute type 3 has an invalid length. [ 380.735859][T16606] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2787'. [ 381.098882][T16621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2790'. [ 381.144265][T16621] bridge0: port 3(dummy0) entered disabled state [ 381.152820][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.160296][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.232940][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2792'. [ 381.305919][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2794'. [ 381.591576][T16642] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 381.689016][T16648] netlink: zone id is out of range [ 381.722275][T16642] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.743587][T16643] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 381.782419][T16655] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 382.115462][T16671] sctp: [Deprecated]: syz.2.2805 (pid 16671) Use of int in maxseg socket option. [ 382.115462][T16671] Use struct sctp_assoc_value instead [ 382.193573][T16671] netlink: 'syz.2.2805': attribute type 14 has an invalid length. [ 382.242735][ T30] audit: type=1800 audit(1782940361.445:4): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2809" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 382.308594][ T30] audit: type=1804 audit(1782940361.475:5): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2809" name="/newroot/577/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 382.413331][ T30] audit: type=1804 audit(1782940361.485:6): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2809" name="/newroot/577/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 382.494530][ T30] audit: type=1800 audit(1782940361.485:7): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2809" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 383.136591][T16714] netlink: 'syz.4.2819': attribute type 27 has an invalid length. [ 383.173441][T16714] netlink: 'syz.4.2819': attribute type 4 has an invalid length. [ 383.951644][T16758] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 384.332868][T16771] __nla_validate_parse: 6 callbacks suppressed [ 384.332889][T16771] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2835'. [ 384.382397][T16773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 384.415321][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 384.463669][T16779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 384.477049][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 384.526359][T16781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2838'. [ 384.840102][T16793] netlink: 'syz.1.2844': attribute type 2 has an invalid length. [ 385.029979][T16797] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 385.054334][T16797] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 388.851668][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 388.924243][T16836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2856'. [ 389.080005][T16833] lo speed is unknown, defaulting to 1000 [ 389.238728][T16848] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 389.437262][T16856] netlink: 'syz.1.2862': attribute type 12 has an invalid length. [ 389.468859][T16858] netlink: 'syz.4.2861': attribute type 2 has an invalid length. [ 389.483977][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2862'. [ 390.091979][T16869] syzkaller0: entered promiscuous mode [ 390.107514][T16869] syzkaller0: entered allmulticast mode [ 390.332734][T16891] sctp: [Deprecated]: syz.2.2871 (pid 16891) Use of int in max_burst socket option deprecated. [ 390.332734][T16891] Use struct sctp_assoc_value instead [ 390.394433][T16895] gtp0: entered promiscuous mode [ 390.399625][T16895] gtp0: entered allmulticast mode [ 390.873966][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 391.448132][T16932] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 391.514823][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2882'. [ 394.343013][T16918] ip6erspan1: entered allmulticast mode [ 394.383648][T16932] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 394.970276][T16960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2890'. [ 395.057446][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 395.098332][T16964] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 395.549517][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 395.842782][T16994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2899'. [ 396.251365][T17013] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 396.381583][T17014] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.422219][T17014] bond7: (slave lo): Enslaving as an active interface with an up link [ 396.442922][T17014] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 396.759791][T17037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2911'. [ 397.027656][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 397.054669][T17055] tipc: Invalid UDP bearer configuration [ 397.054735][T17055] tipc: Enabling of bearer rejected, failed to enable media [ 397.373169][T17066] netlink: 'syz.3.2921': attribute type 9 has an invalid length. [ 397.388557][T17068] x_tables: duplicate underflow at hook 3 [ 397.459627][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 397.469752][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 397.628289][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 397.639215][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 397.827746][T17079] veth11: entered promiscuous mode [ 397.835423][T17079] veth11: entered allmulticast mode [ 397.885634][T17086] Unsupported ieee802154 address type: 0 [ 398.045195][T17091] netlink: 'syz.2.2928': attribute type 1 has an invalid length. [ 398.113769][T17091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.203834][T17091] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 398.276310][T17096] яяяяяя: renamed from virt_wifi0 [ 398.452734][T17105] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 399.375346][T17126] syzkaller0: entered promiscuous mode [ 399.400626][T17126] syzkaller0: entered allmulticast mode [ 399.435429][T17126] netlink: get zone limit has 4 unknown bytes [ 399.447262][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.466351][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.475032][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.489893][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.505188][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.578058][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.588730][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.599934][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.614661][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.638818][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.756762][T17136] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 400.692237][T17158] __nla_validate_parse: 3 callbacks suppressed [ 400.692262][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2947'. [ 400.807113][T17158] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2947'. [ 400.857022][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2947'. [ 401.056224][T17129] lo speed is unknown, defaulting to 1000 [ 401.199071][ T5633] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 401.227578][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 401.301483][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 401.301514][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.301535][ T5633] Call Trace: [ 401.301543][ T5633] [ 401.301552][ T5633] dump_stack_lvl+0xe8/0x150 [ 401.301709][ T5633] dump_header+0xd3/0x4b0 [ 401.301757][ T5633] oom_kill_process+0x3ab/0x970 [ 401.301809][ T5633] out_of_memory+0x1064/0x1480 [ 401.301834][ T5633] ? try_charge_memcg+0xbca/0x1590 [ 401.301931][ T5633] ? __pfx_out_of_memory+0x10/0x10 [ 401.301953][ T5633] ? do_raw_spin_unlock+0xf5/0x210 [ 401.302011][ T5633] try_charge_memcg+0xc74/0x1590 [ 401.302050][ T5633] ? __pfx_try_charge_memcg+0x10/0x10 [ 401.302070][ T5633] ? percpu_ref_tryget+0x15/0x180 [ 401.302115][ T5633] ? charge_memcg+0x20/0x2b0 [ 401.302141][ T5633] charge_memcg+0x19c/0x2b0 [ 401.302164][ T5633] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 401.302186][ T5633] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 401.302213][ T5633] swap_cache_alloc_folio+0x4de/0x990 [ 401.302267][ T5633] swap_cache_read_folio+0x44/0x120 [ 401.302301][ T5633] swap_cluster_readahead+0x3a0/0x640 [ 401.302338][ T5633] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 401.302385][ T5633] ? get_vma_policy+0x27b/0x3c0 [ 401.302431][ T5633] swapin_readahead+0x19a/0xc10 [ 401.302466][ T5633] ? swap_table_get+0x1e/0x260 [ 401.302494][ T5633] ? swap_table_get+0x1e/0x260 [ 401.302523][ T5633] ? __pfx_swapin_readahead+0x10/0x10 [ 401.302554][ T5633] ? swap_table_get+0x1e/0x260 [ 401.302581][ T5633] ? swap_table_get+0x1e/0x260 [ 401.302605][ T5633] ? swap_table_get+0x1e/0x260 [ 401.302635][ T5633] ? swap_table_get+0x216/0x260 [ 401.302662][ T5633] ? swap_cache_get_folio+0x2e7/0x2f0 [ 401.302692][ T5633] do_swap_page+0x455/0x5060 [ 401.302734][ T5633] ? __pte_offset_map+0x29/0x240 [ 401.302764][ T5633] ? __lock_acquire+0x683/0x2cf0 [ 401.302781][ T5633] ? do_swap_page+0x124/0x5060 [ 401.302803][ T5633] ? __pfx_do_swap_page+0x10/0x10 [ 401.302823][ T5633] ? __pte_offset_map+0x1ae/0x240 [ 401.302848][ T5633] ? pte_offset_map_rw_nolock+0xea/0x160 [ 401.302874][ T5633] handle_mm_fault+0x124c/0x3080 [ 401.302915][ T5633] ? handle_mm_fault+0xec/0x3080 [ 401.302945][ T5633] ? __pfx_handle_mm_fault+0x10/0x10 [ 401.302967][ T5633] ? lock_vma_under_rcu+0x45a/0x500 [ 401.303014][ T5633] do_user_addr_fault+0xa4d/0x1340 [ 401.303055][ T5633] ? trace_page_fault_user+0x84/0x1e0 [ 401.303077][ T5633] exc_page_fault+0x6a/0xc0 [ 401.303217][ T5633] asm_exc_page_fault+0x26/0x30 [ 401.303254][ T5633] RIP: 0033:0x7fe413a6be77 [ 401.303272][ T5633] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 99 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 98 ee 00 48 01 d1 39 7c 24 [ 401.303286][ T5633] RSP: 002b:00007ffcd3409200 EFLAGS: 00010202 [ 401.303331][ T5633] RAX: 0000001b34224000 RBX: 000000000000073a RCX: 0000000000061a80 [ 401.303342][ T5633] RDX: 0000000007189751 RSI: 00007ffcd3409290 RDI: 0000000000000008 [ 401.303354][ T5633] RBP: 00007ffcd340923c R08: 000000001b11beba R09: 3fffffffffffffff [ 401.303366][ T5633] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 401.303376][ T5633] R13: 00000000000927c0 R14: 0000000000061411 R15: 00007ffcd3409290 [ 401.303403][ T5633] [ 401.303456][ T5633] memory: usage 307200kB, limit 307200kB, failcnt 431 [ 401.716346][ T5633] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 401.741927][ T5625] Bluetooth: hci5: command tx timeout [ 401.788511][ T5633] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 401.842399][ T5633] Memory cgroup stats for /syz4: [ 401.842732][ T5633] cache 0 [ 401.861519][ T5633] rss 0 [ 401.877585][ T5633] rss_huge 0 [ 401.895450][ T5633] shmem 0 [ 401.907307][ T5633] mapped_file 0 [ 401.924528][ T5633] dirty 0 [ 401.931862][ T5633] writeback 0 [ 401.943673][ T5633] workingset_refault_anon 3 [ 401.976780][ T5633] workingset_refault_file 1 [ 401.991148][ T5633] swap 196608 [ 402.003172][ T5633] swapcached 221184 [ 402.021606][ T5633] pgpgin 42250 [ 402.028902][ T5633] pgpgout 42247 [ 402.045150][ T5633] pgfault 103861 [ 402.073505][ T5633] pgmajfault 3 [ 402.089734][ T5633] inactive_anon 8192 [ 402.114139][ T5633] active_anon 4096 [ 402.135739][ T5633] inactive_file 0 [ 402.158272][ T5633] active_file 0 [ 402.189706][ T5633] unevictable 0 [ 402.200139][ T5633] hierarchical_memory_limit 314572800 [ 402.230168][ T5633] hierarchical_memsw_limit 9223372036854771712 [ 402.253606][ T5633] total_cache 0 [ 402.271616][ T5633] total_rss 0 [ 402.283274][ T5633] total_rss_huge 0 [ 402.298327][ T5633] total_shmem 0 [ 402.312426][ T5633] total_mapped_file 0 [ 402.332601][ T5633] total_dirty 0 [ 402.350142][ T5633] total_writeback 0 [ 402.368007][ T5633] total_workingset_refault_anon 3 [ 402.411494][ T5633] total_workingset_refault_file 1 [ 402.428392][ T5633] total_swap 196608 [ 402.448885][ T5633] total_swapcached 221184 [ 402.479035][ T5633] total_pgpgin 42253 [ 402.503454][ T5633] total_pgpgout 42250 [ 402.525738][ T5633] total_pgfault 103871 [ 402.549649][ T5633] total_pgmajfault 3 [ 402.561636][ T5633] total_inactive_anon 8192 [ 402.572340][ T5633] total_active_anon 4096 [ 402.595594][ T5633] total_inactive_file 0 [ 402.610207][ T5633] total_active_file 0 [ 402.623137][ T5633] total_unevictable 0 [ 402.644246][ T5633] anon_cost 0 [ 402.664739][ T5633] file_cost 0 [ 402.679431][ T5633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2923,pid=17073,uid=0 [ 402.772878][ T5633] Memory cgroup out of memory: Killed process 17073 (syz.4.2923) total-vm:102436kB, anon-rss:1248kB, file-rss:23372kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 403.291709][T17217] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2959'. [ 403.581873][T17227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.607263][T17227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.746556][T17227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.794614][T17227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.811666][ T5625] Bluetooth: hci5: command tx timeout [ 403.913125][T17232] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 404.222436][T17246] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2970'. [ 404.242226][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 404.327043][T17246] vlan2: entered allmulticast mode [ 404.346724][T17246] bond0: entered allmulticast mode [ 404.789800][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.811397][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.818838][T17129] bridge_slave_0: entered allmulticast mode [ 404.835993][T17129] bridge_slave_0: entered promiscuous mode [ 404.854930][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.903493][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.952081][T17129] bridge_slave_1: entered allmulticast mode [ 404.967505][T17129] bridge_slave_1: entered promiscuous mode [ 405.046291][T17261] syzkaller0: entered promiscuous mode [ 405.062862][T17261] syzkaller0: entered allmulticast mode [ 405.501507][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.546006][T17292] bond4: entered allmulticast mode [ 405.567616][T17285] netlink: 'syz.0.2979': attribute type 3 has an invalid length. [ 405.580977][T17285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2979'. [ 405.632174][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.778683][T17129] team0: Port device team_slave_0 added [ 405.790102][T17129] team0: Port device team_slave_1 added [ 405.832974][T17289] bond4: left allmulticast mode [ 405.840411][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.860216][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.896188][ T5625] Bluetooth: hci5: command tx timeout [ 405.940465][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.964456][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.978476][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.023499][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.275541][T17302] syzkaller1: entered promiscuous mode [ 406.285203][T17302] syzkaller1: entered allmulticast mode [ 406.297488][T17312] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 406.320587][T17312] IPVS: length: 238 != 24 [ 406.435367][T17129] hsr_slave_0: entered promiscuous mode [ 406.453898][T17129] hsr_slave_1: entered promiscuous mode [ 406.467875][T17317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2989'. [ 406.707883][T17319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.099854][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 407.249336][T17348] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.261733][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'. [ 407.414616][T17355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 407.557391][T17129] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.604607][T17129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.707236][T17376] bridge0: port 3(macvlan0) entered blocking state [ 407.725459][T17376] bridge0: port 3(macvlan0) entered disabled state [ 407.732949][T17376] macvlan0: entered allmulticast mode [ 407.741515][T17376] macvlan0: entered promiscuous mode [ 407.764358][T17129] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.800994][T17129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.955314][T17129] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.966138][T17129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.982042][ T5625] Bluetooth: hci5: command tx timeout [ 408.077082][T17129] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.088310][T17129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.404361][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 410.481184][T17359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.492051][T17373] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3001'. [ 410.541764][T17129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.640716][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.678442][T17129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.765755][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.834708][T17129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.875435][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.904731][T17129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.937648][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.025391][T17415] veth0: entered promiscuous mode [ 411.044137][T17413] netlink: 'syz.1.3014': attribute type 2 has an invalid length. [ 411.070358][T17413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3014'. [ 411.160706][T17423] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3015'. [ 411.177291][T17422] macvlan2: entered promiscuous mode [ 411.204332][T17422] macvlan2: entered allmulticast mode [ 411.352982][T17428] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 411.361571][T17428] netlink: 'syz.1.3017': attribute type 4 has an invalid length. [ 411.369498][T17428] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3017'. [ 411.415254][T17428] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 411.449964][T17428] netlink: 'syz.1.3017': attribute type 4 has an invalid length. [ 411.473718][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.483122][T17428] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.3017'. [ 411.520180][T17428] bond0: option miimon: invalid value (18446744071829782528) [ 411.545893][T17428] bond0: option miimon: allowed values 0 - 2147483647 [ 411.565019][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.596602][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 411.644328][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.651632][ T9353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.706765][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.714065][ T9353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.385081][T17464] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 412.415634][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 412.426570][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 412.622237][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 412.774788][T17481] xt_socket: unknown flags 0xe4 [ 412.788320][T17481] xt_socket: unknown flags 0xe4 [ 412.803586][T17473] hsr_slave_1 (unregistering): left promiscuous mode [ 413.034083][T17492] netlink: 'syz.2.3033': attribute type 39 has an invalid length. [ 413.122436][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.369700][T17129] veth0_vlan: entered promiscuous mode [ 413.412200][T17129] veth1_vlan: entered promiscuous mode [ 413.553215][T17129] veth0_macvtap: entered promiscuous mode [ 413.595775][T17129] veth1_macvtap: entered promiscuous mode [ 413.643348][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.673870][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.742521][T17518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 413.762072][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.774225][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.788551][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 413.794199][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.823652][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.992816][T17407] veth0: left promiscuous mode [ 414.096287][ T6728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.142165][ T6728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.343283][ T9347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.369259][ T9347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.299269][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.317100][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.328460][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.350159][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.362414][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.487353][T17567] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 415.554105][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 415.582892][T17567] bond8 (unregistering): Released all slaves [ 415.807460][T17598] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3061'. [ 416.049893][T17607] netlink: 'syz.2.3064': attribute type 15 has an invalid length. [ 416.597165][T17624] syzkaller0: entered promiscuous mode [ 416.612870][T17624] syzkaller0: entered allmulticast mode [ 416.831772][T17573] lo speed is unknown, defaulting to 1000 [ 416.844959][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 416.899014][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 417.188055][T17639] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.225594][T17639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.410934][ T5637] Bluetooth: hci0: command tx timeout [ 417.455919][T17639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.481284][T17639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.500111][T17639] veth1_vlan: left promiscuous mode [ 417.507377][T17639] veth0_vlan: entered promiscuous mode [ 417.517126][T17639] veth1_vlan: entered promiscuous mode [ 417.536151][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.547727][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.557210][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.576252][T17639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.586610][T17639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.607169][T17639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.619932][T17639] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.635995][T17639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.656762][T17639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.676504][T17639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 417.694529][T17639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.716107][T17639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 417.745589][T17639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.773947][ T29] lo speed is unknown, defaulting to 1000 [ 417.780117][ T29] sz1: Port: 1 Link ACTIVE [ 417.975333][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.991730][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.023169][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.045131][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.074400][T10028] lo speed is unknown, defaulting to 1000 [ 418.254929][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.286181][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.327244][ T14] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.383649][T13879] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.403308][ T14] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.608862][ T14] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.633234][T13878] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.646421][ T14] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.669940][T13878] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.832923][T13878] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 419.094159][T13878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.102576][T13878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.503073][ T5637] Bluetooth: hci0: command tx timeout [ 421.579532][ T5637] Bluetooth: hci0: command tx timeout [ 422.076990][T17701] : renamed from bond0 [ 422.180064][T17703] netlink: 'syz.1.3088': attribute type 3 has an invalid length. [ 422.231748][ T9368] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 422.262861][ T9368] bond8: (slave veth7): making interface the new active one [ 422.269629][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 422.279823][ T9368] bond8: active interface up! [ 422.357448][T17712] netlink: 'syz.4.3090': attribute type 10 has an invalid length. [ 422.759948][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3096'. [ 422.828596][T17729] syzkaller1: entered promiscuous mode [ 422.890659][T17729] syzkaller1: entered allmulticast mode [ 422.929656][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3094'. [ 423.281484][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3094'. [ 423.302934][T17737] nbd: nbd64 already in use [ 423.378214][T17573] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.386217][T17573] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.395601][T17573] bridge_slave_0: entered allmulticast mode [ 423.416706][T17573] bridge_slave_0: entered promiscuous mode [ 423.629277][T17573] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.653050][ T5637] Bluetooth: hci0: command tx timeout [ 423.670042][T17573] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.702541][T17573] bridge_slave_1: entered allmulticast mode [ 423.717274][T17573] bridge_slave_1: entered promiscuous mode [ 423.993822][T17573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.069710][T17573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.152475][T17706] udevd[17706]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 424.241910][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 424.455176][T17573] team0: Port device team_slave_0 added [ 424.466899][T17573] team0: Port device team_slave_1 added [ 424.602346][T17782] syzkaller1: entered promiscuous mode [ 424.613569][T17782] syzkaller1: entered allmulticast mode [ 424.824509][T17573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.842320][T17573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.926957][T17573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.956193][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 424.970508][T17573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.987651][T17573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.059663][T17573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.234882][T17804] syzkaller0: entered promiscuous mode [ 425.263794][T17804] syzkaller0: entered allmulticast mode [ 425.410159][T17820] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3116'. [ 425.466151][T17573] hsr_slave_0: entered promiscuous mode [ 425.474747][T17573] hsr_slave_1: entered promiscuous mode [ 425.500132][T17573] debugfs: 'hsr0' already exists in 'hsr' [ 425.518879][T17573] Cannot create hsr debugfs directory [ 425.621494][T17826] syzkaller1: entered promiscuous mode [ 425.632184][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3119'. [ 425.654992][T17826] syzkaller1: entered allmulticast mode [ 425.666540][T17833] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3119'. [ 425.845023][T17833] veth3: entered promiscuous mode [ 425.995674][T17835] netlink: 'syz.2.3120': attribute type 3 has an invalid length. [ 426.021851][T17835] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3120'. [ 426.451585][ C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 426.451609][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 426.787302][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 426.800168][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 426.812240][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 426.823907][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.887516][T17878] C: renamed from lo [ 426.896496][T17878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 427.019271][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 427.067281][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 427.092245][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 427.104043][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.178771][T17889] syzkaller0: entered promiscuous mode [ 427.191837][T17889] syzkaller0: entered allmulticast mode [ 427.446897][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 427.621880][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 427.642101][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 427.660896][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.707934][T17900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.018272][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 428.028802][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 428.041234][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 428.043022][T17918] __nla_validate_parse: 1 callbacks suppressed [ 428.043076][T17918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 428.055593][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.276003][T17924] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3142'. [ 429.056666][T17573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.173741][T17573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.219407][T17573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.293311][T17573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.324898][T17970] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 429.377608][T17573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.418125][T17573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.455954][T17573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.520307][T17573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.733094][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 429.768060][T18000] netlink: 'syz.4.3156': attribute type 1 has an invalid length. [ 429.783681][T18000] netlink: 'syz.4.3156': attribute type 3 has an invalid length. [ 429.793934][T18000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3156'. [ 430.246239][T17573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.340370][T17573] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.363600][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.370866][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.415191][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.422448][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.497859][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3160'. [ 430.530972][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.542109][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 431.139592][T18051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3166'. [ 431.170994][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 431.448954][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 431.494576][T18059] netlink: 'syz.2.3169': attribute type 8 has an invalid length. [ 431.955244][T17573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.420047][T17573] veth0_vlan: entered promiscuous mode [ 432.490084][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 432.517190][T17573] veth1_vlan: entered promiscuous mode [ 432.538406][T18098] netlink: 'syz.1.3176': attribute type 10 has an invalid length. [ 432.573495][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3176'. [ 432.644143][T18098] geneve2: entered promiscuous mode [ 432.669917][T18098] geneve2: entered allmulticast mode [ 432.873757][T17573] veth0_macvtap: entered promiscuous mode [ 432.916048][T17573] veth1_macvtap: entered promiscuous mode [ 433.007932][T17573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.055841][T17573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.108053][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.158294][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.198051][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.252981][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.283506][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 433.295864][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 433.319012][T18125] netlink: 'syz.1.3185': attribute type 3 has an invalid length. [ 433.329548][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 433.361088][T18125] netlink: 'syz.1.3185': attribute type 1 has an invalid length. [ 433.379854][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 433.390077][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'. [ 433.433806][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 433.549998][T18134] netlink: 'syz.2.3187': attribute type 5 has an invalid length. [ 433.590351][T18134] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3187'. [ 433.601482][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 433.708071][ T9362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.745883][ T9362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.871826][T18146] x_tables: duplicate underflow at hook 2 [ 433.968547][T18146] team0: Device gtp1 is up. Set it down before adding it as a team port [ 434.060673][ T9362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.111055][ T9362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.316243][T18159] netlink: 'syz.2.3196': attribute type 3 has an invalid length. [ 434.535797][T18166] netlink: 'syz.0.3054': attribute type 2 has an invalid length. [ 435.027755][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.046997][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.056688][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.070022][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.084320][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.548001][T18199] netlink: 'syz.0.3208': attribute type 1 has an invalid length. [ 435.559768][T18199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3208'. [ 435.651176][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 435.795119][T18197] lo speed is unknown, defaulting to 1000 [ 436.024480][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3212'. [ 436.625390][T18233] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.639468][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 436.646545][T18184] lo speed is unknown, defaulting to 1000 [ 437.181883][ T5625] Bluetooth: hci4: command tx timeout [ 437.393869][T18248] veth1_macvtap: left promiscuous mode [ 437.945608][T18250] syzkaller0: entered promiscuous mode [ 437.970708][T18250] syzkaller0: entered allmulticast mode [ 438.080699][T18259] 0·: renamed from hsr0 (while UP) [ 438.103888][T18259] 0·: entered allmulticast mode [ 438.109197][T18259] hsr_slave_0: entered allmulticast mode [ 438.116121][T18259] hsr_slave_1: entered allmulticast mode [ 438.123863][T18259] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 439.258641][ T5625] Bluetooth: hci4: command tx timeout [ 440.134445][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 441.131405][T18282] syz_tun: entered allmulticast mode [ 441.207561][T18282] syz_tun: left allmulticast mode [ 441.270346][T18287] set match dimension is over the limit! [ 441.331445][ T5625] Bluetooth: hci4: command tx timeout [ 441.387608][T18290] syzkaller0: entered promiscuous mode [ 441.405584][T18290] syzkaller0: entered allmulticast mode [ 441.463717][T18292] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 441.497331][T18294] яяяяяя: renamed from virt_wifi0 [ 441.589971][T18306] netlink: 'syz.0.3235': attribute type 1 has an invalid length. [ 441.936449][T18320] --map-set only usable from mangle table [ 442.013853][T18320] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.026240][T18320] gretap1: entered promiscuous mode [ 442.026243][T18324] __nla_validate_parse: 3 callbacks suppressed [ 442.026269][T18324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3239'. [ 442.044325][T18320] gretap1: entered allmulticast mode [ 442.074482][T18184] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.082176][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.089817][T18184] bridge_slave_0: entered allmulticast mode [ 442.099016][T18184] bridge_slave_0: entered promiscuous mode [ 442.109231][T18184] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.116868][T18184] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.125093][T18184] bridge_slave_1: entered allmulticast mode [ 442.134465][T18184] bridge_slave_1: entered promiscuous mode [ 442.280504][T18184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.324058][T18184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.460693][T18184] team0: Port device team_slave_0 added [ 442.480254][T18184] team0: Port device team_slave_1 added [ 442.507302][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 442.688548][T18339] syzkaller0: entered promiscuous mode [ 442.699582][T18339] syzkaller0: entered allmulticast mode [ 442.714472][T18184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.738642][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.793785][T18184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.853445][T18184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.861734][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.891348][T18184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.059100][T18353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3248'. [ 443.411076][ T5625] Bluetooth: hci4: command tx timeout [ 445.899511][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 446.193975][T18345] syzkaller0: entered promiscuous mode [ 446.199540][T18345] syzkaller0: entered allmulticast mode [ 447.822761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.248624][T18361] syzkaller0: entered promiscuous mode [ 450.254918][T18361] syzkaller0: entered allmulticast mode [ 450.484051][T18184] hsr_slave_0: entered promiscuous mode [ 450.491849][T18184] hsr_slave_1: entered promiscuous mode [ 450.498521][T18184] debugfs: 'hsr0' already exists in 'hsr' [ 450.529795][T18184] Cannot create hsr debugfs directory [ 451.228743][T18409] tipc: Enabled bearer , priority 0 [ 451.381989][T18410] syzkaller0: entered promiscuous mode [ 451.387672][T18410] syzkaller0: entered allmulticast mode [ 451.395607][T18410] tipc: Resetting bearer [ 451.499102][T18423] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 451.553640][T18423] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 451.689897][ T142] tipc: Resetting bearer [ 451.724580][T18404] tipc: Resetting bearer [ 454.221328][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 455.095618][T18404] tipc: Disabling bearer [ 455.295484][T18443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3266'. [ 455.395936][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 455.406058][T18443] netlink: 29748 bytes leftover after parsing attributes in process `syz.3.3266'. [ 455.860460][T18464] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 456.079556][T18473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.188920][T18468] bond1: (slave veth3): Enslaving as an active interface with a down link [ 456.216113][T18471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.899056][T18499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3278'. [ 456.964112][T18500] netlink: 'syz.4.3277': attribute type 2 has an invalid length. [ 457.004777][T18500] netlink: 'syz.4.3277': attribute type 2 has an invalid length. [ 457.019757][T18500] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3277'. [ 457.602582][T18526] netlink: 'syz.4.3285': attribute type 21 has an invalid length. [ 457.615701][T18524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3283'. [ 457.642040][T18526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3285'. [ 458.901677][T18594] syzkaller0: entered promiscuous mode [ 458.907424][T18594] syzkaller0: entered allmulticast mode [ 459.600376][T18612] netlink: 'syz.4.3301': attribute type 1 has an invalid length. [ 459.609191][T18612] netlink: 'syz.4.3301': attribute type 2 has an invalid length. [ 459.679175][T18614] netlink: 'syz.4.3302': attribute type 4 has an invalid length. [ 461.086616][T18548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.107407][T18184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.149027][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.168195][T18184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.260127][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.291443][T18184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.342326][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.391907][T18184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.419055][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 461.439526][T18184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.490574][T18626] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 461.509176][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 461.524843][T18627] netlink: 'syz.0.3306': attribute type 14 has an invalid length. [ 461.535189][T18627] netlink: 'syz.0.3306': attribute type 13 has an invalid length. [ 461.899971][T18649] macvlan0 (unregistering): left allmulticast mode [ 461.927942][T18649] macvlan0 (unregistering): left promiscuous mode [ 461.966764][T18649] bridge0: port 3(macvlan0) entered disabled state [ 462.033277][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'. [ 462.265864][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 462.326679][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3313'. [ 462.376430][T18665] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3313'. [ 462.580650][T18656] syzkaller1: entered promiscuous mode [ 462.597511][T18656] syzkaller1: entered allmulticast mode [ 462.635428][T18665] veth5: entered promiscuous mode [ 462.908314][T18184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.000424][T18184] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.032467][T18685] netlink: 'syz.0.3316': attribute type 2 has an invalid length. [ 463.053398][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.060620][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.094346][T18688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3317'. [ 463.109929][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.117223][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.407817][T18696] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 463.508272][T18696] bond8: (slave lo): Enslaving as an active interface with an up link [ 463.589156][T18696] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 463.643128][T18711] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 463.908901][T18716] syzkaller1: entered promiscuous mode [ 463.924581][T18716] syzkaller1: entered allmulticast mode [ 464.462982][T18750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3328'. [ 464.514926][T18750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3328'. [ 464.578241][T18750] rdma_op ffff8880744e69f0 conn xmit_rdma 0000000000000000 [ 464.756728][T18757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3329'. [ 464.809701][T18757] tipc: Invalid UDP bearer configuration [ 464.809764][T18757] tipc: Enabling of bearer rejected, failed to enable media [ 464.873721][T18761] syzkaller0: entered promiscuous mode [ 464.887057][T18761] syzkaller0: entered allmulticast mode [ 465.109060][T18768] openvswitch: netlink: Missing key (keys=40, expected=100) [ 465.145230][T18764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.201641][T18764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.407002][T18781] syzkaller0: entered promiscuous mode [ 465.436732][T18781] syzkaller0: entered allmulticast mode [ 465.503098][T18781] netlink: 'syz.3.3335': attribute type 39 has an invalid length. [ 465.529610][T18789] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 466.089861][T18184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.413298][T18184] veth0_vlan: entered promiscuous mode [ 466.505577][T18184] veth1_vlan: entered promiscuous mode [ 466.739560][T18184] veth0_macvtap: entered promiscuous mode [ 466.784491][T18184] veth1_macvtap: entered promiscuous mode [ 466.910607][T18184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.915059][ T5625] block nbd4: Receive control failed (result -32) [ 467.028374][T18184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.167552][ T6728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.210543][ T6728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.246677][ T6728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.287437][ T6728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.388779][T18855] xfrm3: entered allmulticast mode [ 467.642851][T18869] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 467.719961][T18872] sock: sock_timestamping_bind_phc: sock not bind to device [ 470.251989][T18854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.475903][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.510195][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.598509][ T9368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.626280][ T9368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.725895][T18950] netlink: 'syz.4.3358': attribute type 83 has an invalid length. [ 470.788455][T18950] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 471.063615][T18963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.345909][T18972] __nla_validate_parse: 3 callbacks suppressed [ 471.345931][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 471.388356][T18976] openvswitch: netlink: Unknown nsh attribute 0 [ 471.402340][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 471.463317][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.486961][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.497548][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.512550][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.525115][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.779319][T18989] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 471.816386][T18989] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 471.852981][T18989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3369'. [ 471.880411][T18989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3369'. [ 471.889093][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 471.946220][T18989] ip6gretap0: entered promiscuous mode [ 471.988110][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.029094][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.072165][T18996] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 472.127993][T18996] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 472.223525][T18996] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 472.275801][T18996] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 472.285583][ T5634] bond5: (slave syz_tun): Removing an active aggregator [ 472.307829][ T9353] bond5: Warning: Found an uninitialized port [ 472.322342][ T5634] bond5: (slave syz_tun): Releasing backup interface [ 472.444881][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.469838][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.500515][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.522791][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.545943][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.570378][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.595208][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.622479][T18996] xfrm0 speed is unknown, defaulting to 1000 [ 472.665757][T18979] lo speed is unknown, defaulting to 1000 [ 473.252027][T19035] netlink: 'syz.4.3381': attribute type 21 has an invalid length. [ 473.263463][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'. [ 473.304020][T18979] xfrm0 speed is unknown, defaulting to 1000 [ 473.537507][ C0] Unknown status report in ack skb [ 473.571159][ T5625] Bluetooth: hci1: command tx timeout [ 473.854014][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 473.889160][T19062] netlink: 'syz.0.3388': attribute type 6 has an invalid length. [ 474.308330][T19081] xt_hashlimit: invalid rate [ 474.373316][T19087] syzkaller0: entered promiscuous mode [ 474.389163][T19087] syzkaller0: entered allmulticast mode [ 474.542650][T19092] netlink: 'syz.2.3396': attribute type 7 has an invalid length. [ 474.572121][T19092] x_tables: duplicate underflow at hook 2 [ 474.805575][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.813037][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.820371][T18979] bridge_slave_0: entered allmulticast mode [ 474.829552][T18979] bridge_slave_0: entered promiscuous mode [ 474.841192][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.848491][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.856567][T18979] bridge_slave_1: entered allmulticast mode [ 474.868170][T18979] bridge_slave_1: entered promiscuous mode [ 474.933620][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.993084][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.197689][T18979] team0: Port device team_slave_0 added [ 475.220668][T19110] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 475.245334][T18979] team0: Port device team_slave_1 added [ 475.318198][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 475.338896][T19110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.347371][T19116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 475.570521][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.610519][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.658546][ T5625] Bluetooth: hci1: command tx timeout [ 475.672997][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.714565][T19133] netlink: 'syz.0.3405': attribute type 2 has an invalid length. [ 475.742070][T19132] netlink: 'syz.0.3405': attribute type 2 has an invalid length. [ 475.748781][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.765486][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.801398][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.865728][T19132] : entered promiscuous mode [ 476.122443][T18979] hsr_slave_0: entered promiscuous mode [ 476.146235][T18979] hsr_slave_1: entered promiscuous mode [ 476.178174][T18979] debugfs: 'hsr0' already exists in 'hsr' [ 476.191701][T18979] Cannot create hsr debugfs directory [ 476.198598][T19142] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3407'. [ 476.256007][T19142] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3407'. [ 476.779389][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3413'. [ 476.890449][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'. [ 477.028954][T19157] veth1_to_bond: entered allmulticast mode [ 477.065207][T19170] netlink: 'syz.4.3414': attribute type 15 has an invalid length. [ 477.119192][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 477.137334][T19156] veth1_to_bond: left allmulticast mode [ 477.232170][T19170] netlink: 'syz.4.3414': attribute type 15 has an invalid length. [ 477.246303][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 477.286750][T18979] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.314480][T18979] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.364207][ T36] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.374930][T16881] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.405706][T16881] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.425591][T19186] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 477.445365][T18979] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.458068][T18979] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.585676][T18979] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.603425][T18979] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.730908][ T5625] Bluetooth: hci1: command tx timeout [ 477.748304][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 477.818006][T18979] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.831673][T18979] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.901699][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 478.046247][T19194] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.054102][T19194] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.253817][T19194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.272984][T19194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.429286][T19194] gretap1: left promiscuous mode [ 478.434918][T19194] gretap1: left allmulticast mode [ 478.447370][T19191] syzkaller0: entered promiscuous mode [ 478.457341][T19191] syzkaller0: entered allmulticast mode [ 478.476496][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.561133][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.593983][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.718111][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.234750][T19231] syzkaller0: entered promiscuous mode [ 479.254790][T19231] syzkaller0: entered allmulticast mode [ 479.469855][T18979] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 479.486365][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.508301][T18979] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.539062][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.574051][T18979] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.611810][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.647656][T18979] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.681576][T19245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3436'. [ 479.694082][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.793907][T19254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3434'. [ 479.820238][ T5625] Bluetooth: hci1: command tx timeout [ 480.023183][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.058837][T19262] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3439'. [ 480.092094][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.194036][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3441'. [ 480.216076][T19271] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3441'. [ 481.733082][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.743967][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.751211][ T9362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.912057][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 481.926955][T19298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3444'. [ 481.936703][T19290] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 481.981162][T19290] syzkaller0: entered promiscuous mode [ 481.986898][T19290] syzkaller0: entered allmulticast mode [ 481.999813][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.007100][ T9362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.028404][T19297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 482.040836][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3445'. [ 482.061921][T19297] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 482.076443][T19297] gretap1: entered promiscuous mode [ 482.082409][T19297] gretap1: entered allmulticast mode [ 482.093482][T19298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3444'. [ 482.183583][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3445'. [ 482.209353][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 482.615644][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3451'. [ 482.987803][T19342] x_tables: duplicate underflow at hook 3 [ 483.070567][T19345] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 483.581824][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.596913][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 483.624415][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 483.727608][T19375] netlink: 'syz.2.3464': attribute type 11 has an invalid length. [ 483.751812][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 483.805908][T19375] netlink: 'syz.2.3464': attribute type 11 has an invalid length. [ 483.832122][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.858566][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.906108][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.947595][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.994589][T18979] veth0_vlan: entered promiscuous mode [ 484.095066][T18979] veth1_vlan: entered promiscuous mode [ 484.248505][T18979] veth0_macvtap: entered promiscuous mode [ 484.328618][T18979] veth1_macvtap: entered promiscuous mode [ 484.442511][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.502784][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.549386][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.589322][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.645359][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.712760][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.063044][T19420] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 485.121313][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.154895][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.282800][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.300194][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.636071][T19448] x_tables: duplicate underflow at hook 2 [ 486.001726][T19459] syzkaller1: entered promiscuous mode [ 486.023454][T19459] syzkaller1: entered allmulticast mode [ 486.239321][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.253677][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.264489][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.274485][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.282681][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.459721][T19474] netlink: 'syz.2.3494': attribute type 17 has an invalid length. [ 486.479441][T19474] gretap0: entered promiscuous mode [ 486.498352][T19474] gretap0: left promiscuous mode [ 486.603179][T19477] netlink: 'syz.1.3495': attribute type 10 has an invalid length. [ 486.648845][T19477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.673488][T19477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.718237][T19477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.748720][T19477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.125265][T19493] policy can only be matched on NF_INET_PRE_ROUTING [ 487.125291][T19493] unable to load match [ 487.374693][T19502] __nla_validate_parse: 8 callbacks suppressed [ 487.374716][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3503'. [ 487.500128][T19502] 8021q: VLANs not supported on ip_vti0 [ 487.587831][T19467] lo speed is unknown, defaulting to 1000 [ 487.815243][T19525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3509'. [ 488.144737][T19535] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3511'. [ 488.205284][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3512'. [ 488.372510][ T5625] Bluetooth: hci3: command tx timeout [ 488.394257][T19467] xfrm0 speed is unknown, defaulting to 1000 [ 488.654276][T19550] netlink: 'syz.0.3517': attribute type 10 has an invalid length. [ 488.668858][T19550] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 488.678765][T19548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3516'. [ 488.735379][T19544] syzkaller0: entered promiscuous mode [ 488.749118][T19544] syzkaller0: entered allmulticast mode [ 488.975005][T19558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3519'. [ 489.265159][T19569] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3522'. [ 489.316409][T19571] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3522'. [ 489.385023][T19573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'. [ 489.396132][T19573] bond0: ARP target 8.4.0.0 is already present [ 489.403451][T19573] bond0: option arp_ip_target: invalid value (1032) [ 489.421389][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 489.819680][T19597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3531'. [ 489.863486][T19467] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.871660][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.879019][T19467] bridge_slave_0: entered allmulticast mode [ 489.888891][T19467] bridge_slave_0: entered promiscuous mode [ 489.899752][T19467] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.907687][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.916210][T19467] bridge_slave_1: entered allmulticast mode [ 489.925669][T19467] bridge_slave_1: entered promiscuous mode [ 489.984719][T19467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.009190][T19467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.062433][T19467] team0: Port device team_slave_0 added [ 490.072743][T19467] team0: Port device team_slave_1 added [ 490.112756][T19467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.125323][T19467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.153311][T19467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.169023][T19467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.193170][T19608] xt_l2tp: missing protocol rule (udp|l2tpip) [ 490.200386][T19467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.230413][T19467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.451302][ T5625] Bluetooth: hci3: command tx timeout [ 490.494544][T19619] veth1_macvtap: left promiscuous mode [ 490.504743][T19619] macsec0: entered promiscuous mode [ 490.517789][T19619] macsec0: entered allmulticast mode [ 490.594778][T19620] veth1_macvtap: entered promiscuous mode [ 490.611283][T19620] veth1_macvtap: entered allmulticast mode [ 490.651283][T19620] macsec0: left promiscuous mode [ 490.679774][T19620] macsec0: left allmulticast mode [ 490.686192][T19620] veth1_macvtap: left allmulticast mode [ 490.746181][T19467] hsr_slave_0: entered promiscuous mode [ 490.758432][T19467] hsr_slave_1: entered promiscuous mode [ 490.773856][T19467] debugfs: 'hsr0' already exists in 'hsr' [ 490.781304][T19467] Cannot create hsr debugfs directory [ 491.448051][T19467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.462566][T19467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 491.473915][T19467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.486920][T19467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 491.526037][ T29] IPVS: starting estimator thread 0... [ 491.551633][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880502c9400: rx timeout, send abort [ 491.562283][T19649] bond0: entered promiscuous mode [ 491.567827][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880502c9400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 491.573693][T19649] bond_slave_0: entered promiscuous mode [ 491.582679][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880502c9000: rx timeout, send abort [ 491.589421][T19649] bond_slave_1: entered promiscuous mode [ 491.599532][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880502c9000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 491.607752][T19649] dummy0: entered promiscuous mode [ 491.631162][T19655] IPVS: using max 33 ests per chain, 79200 per kthread [ 491.667947][T19649] batadv0: entered promiscuous mode [ 491.675622][T19649] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 491.687660][T19649] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 491.726473][T19649] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 491.758843][T19649] bond0: left promiscuous mode [ 491.765111][T19649] bond_slave_0: left promiscuous mode [ 491.771865][T19649] bond_slave_1: left promiscuous mode [ 491.777738][T19649] dummy0: left promiscuous mode [ 491.784642][T19649] batadv0: left promiscuous mode [ 491.957036][T19467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.991842][T19467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 492.008987][T19467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.038153][T19467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 492.344702][T19467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.367816][T19467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 492.409463][T19467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.428339][T19467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 492.532787][ T5625] Bluetooth: hci3: command tx timeout [ 492.551000][T19687] __nla_validate_parse: 7 callbacks suppressed [ 492.551019][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3558'. [ 492.640463][T19691] vlan0: entered promiscuous mode [ 492.647025][T19691] bridge0: entered promiscuous mode [ 492.797946][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'. [ 493.167505][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'. [ 493.202008][T19712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'. [ 493.213718][T19714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.234776][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 493.316471][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 493.353199][T19721] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 493.367785][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3568'. [ 493.429326][T19467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.465314][T19467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.507995][T19467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.606375][T19467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.634685][T19467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.663089][T19467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.675259][T19467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.706697][T19467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.861038][T19749] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3574'. [ 494.572130][T19761] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 494.611044][ T5625] Bluetooth: hci3: command tx timeout [ 494.681503][T19761] xt_hashlimit: size too large, truncated to 1048576 [ 494.756870][T19467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.832060][T19769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3577'. [ 494.857748][T19467] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.897431][T19765] syzkaller0: entered promiscuous mode [ 494.932103][T19765] syzkaller0: entered allmulticast mode [ 494.969565][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.976846][T16881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.121760][T19771] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 495.415760][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.423036][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.870421][T19794] netlink: 'syz.0.3582': attribute type 11 has an invalid length. [ 495.944763][T19798] veth0: entered promiscuous mode [ 495.969187][T19798] veth0: left promiscuous mode [ 496.218203][T19804] batadv_slave_1: entered promiscuous mode [ 496.277228][T19804] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 496.329736][T19803] batadv_slave_1: left promiscuous mode [ 496.392784][T19810] nftables ruleset with unbound set [ 496.467563][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 496.992629][T19832] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 497.036965][T19833] syzkaller0: entered promiscuous mode [ 497.061898][T19833] syzkaller0: entered allmulticast mode [ 497.319965][T19467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.786281][T19861] __nla_validate_parse: 2 callbacks suppressed [ 497.786303][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3601'. [ 498.232704][T19467] veth0_vlan: entered promiscuous mode [ 498.293673][T19467] veth1_vlan: entered promiscuous mode [ 498.491760][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3607'. [ 498.502745][T19467] veth0_macvtap: entered promiscuous mode [ 498.528642][T19882] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 498.539493][T19467] veth1_macvtap: entered promiscuous mode [ 498.669185][T19886] Cannot find set identified by id 0 to match [ 498.737203][T19887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3609'. [ 498.769884][T19467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.815561][T19467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.841189][T19891] netlink: 'syz.3.3611': attribute type 10 has an invalid length. [ 498.876732][T19891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.926139][T19891] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 499.068112][T19894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.131140][T19894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.197190][T19894] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 499.236140][T19894] bond0 (unregistering): Released all slaves [ 499.248416][T19912] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3615'. [ 499.280031][ T6728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.303369][ T6728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.347036][ T6728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.368092][T19914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.414595][ T6728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.590295][T19918] Bluetooth: MGMT ver 1.23 [ 499.817525][ T9362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.855421][ T9362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.004556][ T9353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.025902][ T9353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.417869][T19943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3488'. [ 500.445267][T19903] infiniband syz1: set active [ 500.473014][T19903] infiniband syz1: added bridge_slave_0 [ 500.509878][T19903] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 500.548919][T19903] infiniband syz1: Couldn't open port 1 [ 500.605535][T19903] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 500.645431][T19960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3625'. [ 500.664859][T19903] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 500.749636][T19903] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 500.893233][T19968] netlink: 'syz.2.3628': attribute type 10 has an invalid length. [ 500.949050][T19968] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.036089][T19968] bond0: (slave team0): Enslaving as an active interface with an up link [ 501.046487][T19903] RDS/IB: syz1: added [ 501.085151][T19903] smc: adding ib device syz1 with port count 1 [ 501.147975][T19903] smc: ib device syz1 port 1 has no pnetid [ 501.369283][T19987] netlink: 'syz.2.3632': attribute type 6 has an invalid length. [ 501.403627][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 501.907984][T20012] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 501.984405][T20014] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 502.183304][T20020] xt_hashlimit: invalid interval [ 502.220509][T20020] netlink: 'syz.0.3640': attribute type 1 has an invalid length. [ 502.261670][T20020] netlink: 15134 bytes leftover after parsing attributes in process `syz.0.3640'. [ 502.432064][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3643'. [ 502.466886][T20034] pimreg: entered allmulticast mode [ 503.075923][T20055] x_tables: duplicate underflow at hook 1 [ 503.098720][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 503.139703][T20055] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.149987][T20055] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.218771][T20057] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3653'. [ 503.316052][T20059] 8021q: VLANs not supported on ipvlan1 [ 503.465467][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3655'. [ 503.939469][T20069] bond1: entered promiscuous mode [ 503.964790][T20069] bond1: entered allmulticast mode [ 503.996494][T20069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.040436][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 504.447250][T20083] team0: Port device team_slave_0 removed [ 504.579104][T20075] syzkaller0: entered promiscuous mode [ 504.585517][T20075] syzkaller0: entered allmulticast mode [ 504.594178][T20086] syzkaller0: entered promiscuous mode [ 504.646285][T20086] syzkaller0: entered allmulticast mode [ 507.480660][T20100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.678425][T20113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3665'. [ 508.203142][T20120] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 508.507957][T20136] netlink: 'syz.2.3670': attribute type 4 has an invalid length. [ 508.810199][T20146] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3675'. [ 508.892079][T20146] bond0 (unregistering): Released all slaves [ 509.280882][T20159] netlink: 'syz.4.3679': attribute type 4 has an invalid length. [ 509.307182][T20159] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3679'. [ 509.525785][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'. [ 510.321993][T20195] lo speed is unknown, defaulting to 1000 [ 510.424447][T20210] debugfs: '1ща^!' already exists in 'ieee80211' [ 510.506282][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3691'. [ 510.688192][T20222] bond_slave_0: entered promiscuous mode [ 510.694167][T20222] bond_slave_0: entered allmulticast mode [ 510.748126][T20222] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3692'. [ 510.751849][T20211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.767290][T20212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.814091][T20224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3693'. [ 511.290401][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 511.637357][T20195] xfrm0 speed is unknown, defaulting to 1000 [ 511.912803][T20259] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3704'. [ 511.981879][T20259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.996099][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 512.012446][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 512.409326][T20275] 8021q: VLANs not supported on ip6_vti0 [ 512.683822][T20282] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 512.698538][T20282] bond0 (unregistering): Released all slaves [ 513.676726][T20315] netlink: 'syz.3.3721': attribute type 2 has an invalid length. [ 513.795054][T20317] netlink: 'syz.1.3719': attribute type 20 has an invalid length. [ 513.826873][T20317] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.244269][T20317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.315300][T20317] bond0: (slave bond1): Enslaving as an active interface with an up link [ 514.438797][T20330] IPVS: length: 144 != 260541775320 [ 514.521629][T20332] __nla_validate_parse: 14 callbacks suppressed [ 514.521651][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 514.565607][ T30] audit: type=1804 audit(1782940493.775:8): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3728" name="/newroot/170/cgroup.controllers" dev="tmpfs" ino=884 res=1 errno=0 [ 514.634470][ T30] audit: type=1800 audit(1782940493.805:9): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3728" name="cgroup.controllers" dev="tmpfs" ino=884 res=0 errno=0 [ 515.309348][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 515.771811][T20388] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3746'. [ 515.973405][T20399] syzkaller0: entered promiscuous mode [ 515.991947][T20399] syzkaller0: entered allmulticast mode [ 516.118670][T20409] team0: entered promiscuous mode [ 516.133088][T20409] team_slave_0: entered promiscuous mode [ 516.139128][T20409] team_slave_1: entered promiscuous mode [ 516.313656][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 516.327238][T20424] netlink: 'syz.0.3755': attribute type 1 has an invalid length. [ 516.336262][T20424] netlink: 'syz.0.3755': attribute type 2 has an invalid length. [ 516.427749][T20429] sctp: [Deprecated]: syz.2.3757 (pid 20429) Use of int in maxseg socket option. [ 516.427749][T20429] Use struct sctp_assoc_value instead [ 517.025733][T16881] dummy0: left allmulticast mode [ 517.045905][T16881] dummy0: left promiscuous mode [ 517.059800][T16881] bridge0: port 1(dummy0) entered disabled state [ 517.624910][T16881]  (unregistering): Released all slaves [ 517.636876][T16881] bond1 (unregistering): Released all slaves [ 517.664659][T16881] bond2 (unregistering): Released all slaves [ 517.685912][T16881] bond3 (unregistering): Released all slaves [ 517.714850][T16881] bond4 (unregistering): Released all slaves [ 517.749564][T16881] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 517.771797][T16881] bond5 (unregistering): Released all slaves [ 517.946672][T16881] tipc: Left network mode [ 518.796099][T16881] hsr_slave_0: left promiscuous mode [ 518.822877][T16881] hsr_slave_1: left promiscuous mode [ 519.001560][T20407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.396292][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 519.517151][T20459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.727239][T20469] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.869286][T20485] syz_tun: entered allmulticast mode [ 519.901957][T20484] syz_tun: left allmulticast mode [ 519.959605][T20489] netlink: 'syz.3.3772': attribute type 11 has an invalid length. [ 519.978063][T20489] netlink: 'syz.3.3772': attribute type 4 has an invalid length. [ 519.999271][T20489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3772'. [ 520.015659][T20490] netlink: 'syz.3.3772': attribute type 11 has an invalid length. [ 520.025297][T20490] netlink: 'syz.3.3772': attribute type 4 has an invalid length. [ 520.034340][T20490] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3772'. [ 520.154706][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 520.290342][T20497] xt_ecn: cannot match TCP bits for non-tcp packets [ 520.389077][T20503] netlink: 'syz.4.3776': attribute type 21 has an invalid length. [ 520.438689][T20503] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.888036][T16881] IPVS: stop unused estimator thread 0... [ 520.986036][T20525] syzkaller0: entered promiscuous mode [ 521.018631][T20525] syzkaller0: entered allmulticast mode [ 521.282468][T20539] xt_hashlimit: size too large, truncated to 1048576 [ 521.326257][T20525] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 521.344350][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3786'. [ 521.361251][T20525] bond2: option packets_per_slave: allowed values 0 - 65535 [ 521.401691][T20525] bond2 (unregistering): Released all slaves [ 521.431612][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 521.714636][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 522.456043][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.542739][T20598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3799'. [ 522.565779][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3801'. [ 522.833878][T20616] bond0: entered promiscuous mode [ 522.855772][T20616] bond_slave_0: entered promiscuous mode [ 522.877762][T20616] bond_slave_1: entered promiscuous mode [ 522.889486][T20627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3806'. [ 522.902852][T20616] batadv0: entered promiscuous mode [ 522.914544][T20616] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 522.964269][T20623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3805'. [ 523.075244][T20623] IPv6: sit1: Disabled Multicast RS [ 523.083770][T20623] sit1: entered allmulticast mode [ 523.327708][T20644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.417727][ T9347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.435523][ T9347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.478983][ T5749] IPVS: starting estimator thread 0... [ 523.592399][T20655] IPVS: using max 25 ests per chain, 60000 per kthread [ 523.772293][T20661] syzkaller0: entered promiscuous mode [ 523.796832][T20661] syzkaller0: entered allmulticast mode [ 524.131607][T20578] Bluetooth: hci5: command 0x0406 tx timeout [ 524.334678][T20693] x_tables: duplicate underflow at hook 1 [ 524.342174][T20682] syzkaller0: entered promiscuous mode [ 524.349152][T20682] syzkaller0: entered allmulticast mode [ 524.539204][T20665] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 524.706959][T20706] netlink: 'syz.1.3830': attribute type 12 has an invalid length. [ 524.741575][T20706] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 524.783313][T20706] netlink: 'syz.1.3830': attribute type 1 has an invalid length. [ 524.821982][T20706] netlink: 'syz.1.3830': attribute type 2 has an invalid length. [ 525.177228][T20731] netlink: 'syz.4.3836': attribute type 1 has an invalid length. [ 525.232752][T20731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.263913][T20731] bond2: (slave geneve2): making interface the new active one [ 525.275898][T20731] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 525.507957][T20751] 8021q: VLANs not supported on tunl0 [ 525.731326][ T5625] Bluetooth: hci0: command 0x0c20 tx timeout [ 526.006769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034f26800: rx timeout, send abort [ 526.015570][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034f26800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 526.245798][T20770] __nla_validate_parse: 6 callbacks suppressed [ 526.245820][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'. [ 526.299283][T20774] 8021q: VLANs not supported on ip_vti0 [ 526.313394][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3848'. [ 526.330619][T20774] 8021q: VLANs not supported on ip_vti0 [ 526.422184][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 526.645544][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 526.655496][T20796] openvswitch: netlink: Missing key (keys=40, expected=100) [ 528.404895][T20745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.659178][T20821] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3859'. [ 528.677519][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3863'. [ 528.688397][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3859'. [ 528.699498][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3859'. [ 528.729170][T20836] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3861'. [ 528.810529][T20838] vlan2: entered allmulticast mode [ 528.836688][T20838] bridge2: entered allmulticast mode [ 528.878585][T20826] bridge2: port 1(erspan0) entered blocking state [ 528.910594][T20826] bridge2: port 1(erspan0) entered disabled state [ 528.933068][T20841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3865'. [ 528.942906][T20826] erspan0: entered allmulticast mode [ 528.952182][T20826] erspan0: entered promiscuous mode [ 528.959063][T20826] bridge2: port 1(erspan0) entered blocking state [ 528.965746][T20826] bridge2: port 1(erspan0) entered forwarding state [ 529.008434][T20846] xt_hashlimit: size too large, truncated to 1048576 [ 529.652321][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.663549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.138925][T20882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.211330][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.353543][T20898] openvswitch: netlink: Message has 4 unknown bytes. [ 530.366888][T20898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.444208][T20882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.476086][T20901] xt_TCPMSS: Only works on TCP SYN packets [ 530.729017][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.737558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.749687][T20915] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 530.768983][T20882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.797039][T20915] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 530.838130][T20914] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 530.855999][T20921] sctp: [Deprecated]: syz.0.3888 (pid 20921) Use of int in max_burst socket option. [ 530.855999][T20921] Use struct sctp_assoc_value instead [ 530.879355][T20914] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 531.069136][T20882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.362218][T20938] __nla_validate_parse: 3 callbacks suppressed [ 531.362238][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 531.415928][T16881] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.442733][T20941] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 531.466640][T20941] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3895'. [ 531.597327][T16881] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.665960][T16880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.678238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.731250][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.802951][T20968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.828368][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.916472][ T9357] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.146663][T20979] Bluetooth: MGMT ver 1.23 [ 532.165706][T20979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 532.402294][T20988] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3910'. [ 532.417593][T20991] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 532.518186][T20995] netlink: 'syz.3.3912': attribute type 30 has an invalid length. [ 532.545882][T20988] syzkaller0: entered promiscuous mode [ 532.559628][T20988] syzkaller0: entered allmulticast mode [ 532.674594][T20995] bond0: option arp_missed_max: invalid value (0) [ 532.714090][T20995] bond0: option arp_missed_max: allowed values 1 - 255 [ 532.761950][T20995] bond0 (unregistering): Released all slaves [ 532.849856][T21021] netlink: 'syz.1.3918': attribute type 11 has an invalid length. [ 532.988698][T21021] ksmbd: Unknown IPC event: 1, ignore. [ 533.846573][T21049] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 534.128931][T21053] netlink: 'syz.1.3927': attribute type 6 has an invalid length. [ 534.677977][T21064] net_ratelimit: 7 callbacks suppressed [ 534.677998][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.694018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.942707][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.951331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.978896][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.987590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.301985][T11526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.014017][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.022716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.410463][T21042] netlink: 'syz.4.3923': attribute type 2 has an invalid length. [ 537.426293][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.589111][T21070] netlink: 'syz.0.3931': attribute type 46 has an invalid length. [ 537.839649][T21087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3934'. [ 538.149987][T21104] syzkaller1: entered promiscuous mode [ 538.164518][T21104] syzkaller1: entered allmulticast mode [ 538.186154][T21107] pimreg: entered allmulticast mode [ 538.546729][T21120] ipvlan1: entered promiscuous mode [ 538.624227][T21120] ipvlan1: entered allmulticast mode [ 538.691523][T21120] veth0_vlan: entered allmulticast mode [ 538.793522][T21136] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3945'. [ 538.823363][T21136] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3945'. [ 539.276476][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3947'. [ 539.300273][T21152] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 539.304971][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3947'. [ 539.344485][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3947'. [ 539.369258][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3947'. [ 539.491210][T20578] Bluetooth: hci0: command 0x0c20 tx timeout [ 539.645883][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3951'. [ 539.667928][ T5625] Bluetooth: hci3: link tx timeout [ 539.677085][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.691434][T20578] Bluetooth: hci3: link tx timeout [ 539.697563][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.827281][T21167] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.834612][T21167] bridge0: port 2(bridge_slave_1) entered listening state [ 539.842150][T21167] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.849385][T21167] bridge0: port 1(bridge_slave_0) entered listening state [ 539.938636][T21178] syzkaller0: entered promiscuous mode [ 539.976187][T21178] syzkaller0: entered allmulticast mode [ 540.132040][T10038] net_ratelimit: 9 callbacks suppressed [ 540.132060][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.146131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.221263][T20578] Bluetooth: hci3: link tx timeout [ 540.226489][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.241423][T20578] Bluetooth: hci3: link tx timeout [ 540.246641][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.481377][T20578] Bluetooth: hci3: link tx timeout [ 540.486604][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.533315][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.663565][T20578] Bluetooth: hci3: link tx timeout [ 540.668822][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.673427][T21216] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 541.129077][T21237] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 541.145936][T21238] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 541.171762][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.180235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.343352][T21246] pim6reg: entered allmulticast mode [ 541.379636][T21248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.417221][T21252] pim6reg: left allmulticast mode [ 541.494495][T20578] Bluetooth: hci3: link tx timeout [ 541.499762][T20578] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.526335][T21258] netlink: 'syz.4.3970': attribute type 3 has an invalid length. [ 541.536390][T21257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3971'. [ 541.731508][T20578] Bluetooth: hci3: command 0x0406 tx timeout [ 541.747776][T21262] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 541.835299][T21269] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 541.934871][T21269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.944128][T21276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 542.215086][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.223968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.356070][T21298] netlink: 'syz.0.3983': attribute type 4 has an invalid length. [ 542.414993][T21294] syzkaller0: entered promiscuous mode [ 542.420938][T21294] syzkaller0: entered allmulticast mode [ 542.536502][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 542.549977][T21007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.558711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.043616][T21328] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 543.069736][T21328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.173514][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.634635][T21349] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3990'. [ 543.679757][T21350] syzkaller0: entered promiscuous mode [ 543.685579][T21350] syzkaller0: entered allmulticast mode [ 545.330984][T10039] net_ratelimit: 6 callbacks suppressed [ 545.331004][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.345257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.357180][T21298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.221836][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.230340][T21381] block nbd0: reconnected socket [ 546.252035][ T5625] block nbd0: Receive control failed (result -107) [ 546.371944][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.380382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.417337][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.425976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.302215][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.310605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.451117][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.473949][T21394] syzkaller0: entered promiscuous mode [ 548.502085][T21394] syzkaller0: entered allmulticast mode [ 548.537687][T21400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4005'. [ 548.805837][T21408] bridge_slave_1: left allmulticast mode [ 548.817801][T21408] bridge_slave_1: left promiscuous mode [ 548.835337][T21408] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.905863][T21408] bridge_slave_0: left allmulticast mode [ 548.925269][T21408] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.916521][T21433] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 549.926380][T21433] bond4: option packets_per_slave: allowed values 0 - 65535 [ 549.936623][T21446] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4014'. [ 549.946902][T21433] bond4 (unregistering): Released all slaves [ 550.220300][T21459] netlink: 344 bytes leftover after parsing attributes in process `syz.1.4018'. [ 550.286963][T21455] xt_CT: No such helper "snmp_trap" [ 550.618841][T10028] net_ratelimit: 6 callbacks suppressed [ 550.618861][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.633524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.652639][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.661563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.792399][T21413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.990021][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.166792][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 552.269347][T21508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 552.465934][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 552.475182][T16884] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.501661][T21508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 552.509399][T16884] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.595908][T16884] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.643432][T16884] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.692137][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.700548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.716323][T21517] pim6reg1: entered promiscuous mode [ 552.740980][T21517] pim6reg1: entered allmulticast mode [ 552.774852][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 552.928254][T21537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4035'. [ 553.154561][T21545] macvtap0: mtu less than device minimum [ 553.222456][T21543] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4036'. [ 553.705145][T21564] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4043'. [ 553.740895][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.749283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.768735][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4043'. [ 553.815851][T21571] netlink: 'syz.1.4046': attribute type 5 has an invalid length. [ 554.173077][T21584] gretap0: entered promiscuous mode [ 554.197613][T21584] gretap0: left promiscuous mode [ 554.426466][T21599] tap0: tun_chr_ioctl cmd 1074025672 [ 554.464005][T21599] tap0: ignored: set checksum disabled [ 554.610644][T21611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.441935][T21639] __nla_validate_parse: 8 callbacks suppressed [ 555.441957][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'. [ 555.519524][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4064'. [ 555.570633][T21639] netlink: 'syz.4.4064': attribute type 14 has an invalid length. [ 555.616717][T21639] netlink: 'syz.4.4064': attribute type 13 has an invalid length. [ 555.638491][T21643] lo: entered promiscuous mode [ 555.668122][T21643] netlink: 'syz.2.4065': attribute type 2 has an invalid length. [ 555.686340][T21643] net_ratelimit: 5 callbacks suppressed [ 555.686360][T21643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.812361][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.821674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.092707][ T30] audit: type=1804 audit(1782940535.295:10): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4068" name="/newroot/174/cgroup.controllers" dev="tmpfs" ino=909 res=1 errno=0 [ 556.199172][ T30] audit: type=1800 audit(1782940535.295:11): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4068" name="cgroup.controllers" dev="tmpfs" ino=909 res=0 errno=0 [ 556.275244][ T30] audit: type=1800 audit(1782940535.335:12): pid=21656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4068" name="cgroup.controllers" dev="tmpfs" ino=909 res=0 errno=0 [ 556.397873][T21661] bridge2: port 1(erspan0) entered disabled state [ 556.465064][T21661] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.566215][T21672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4073'. [ 556.675644][T21661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.699873][T21661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.824539][T21681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4075'. [ 556.852561][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.861168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.895932][T21663] geneve3: entered promiscuous mode [ 556.902186][T21663] geneve3: entered allmulticast mode [ 556.913886][ T9349] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.937470][ T9349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.969063][ T9349] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.007146][ T9349] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.054372][ T9349] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.099604][ T9349] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.138940][ T9349] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.169072][ T9349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.188922][ T9349] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.221277][ T9349] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.234894][ T9349] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.247938][ T9349] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.264521][ T30] audit: type=1800 audit(1782940536.475:13): pid=21691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4079" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1194 res=0 errno=0 [ 557.290124][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'. [ 557.363503][T21690] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4077'. [ 557.433172][T21007] [ 557.435579][T21007] ====================================================== [ 557.442631][T21007] WARNING: possible circular locking dependency detected [ 557.449748][T21007] syzkaller #0 Not tainted [ 557.454192][T21007] ------------------------------------------------------ [ 557.461235][T21007] kworker/u8:26/21007 is trying to acquire lock: [ 557.467588][T21007] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 557.477461][T21007] [ 557.477461][T21007] but task is already holding lock: [ 557.484840][T21007] ffff888056ab60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 557.494720][T21007] [ 557.494720][T21007] which lock already depends on the new lock. [ 557.494720][T21007] [ 557.505145][T21007] [ 557.505145][T21007] the existing dependency chain (in reverse order) is: [ 557.514269][T21007] [ 557.514269][T21007] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 557.522351][T21007] lock_sock_nested+0x41/0x100 [ 557.527768][T21007] mptcp_connect+0x439/0x7a0 [ 557.532984][T21007] __inet_stream_connect+0x258/0xe00 [ 557.538816][T21007] inet_stream_connect+0x66/0xa0 [ 557.544315][T21007] __sys_connect+0x323/0x460 [ 557.549516][T21007] __x64_sys_connect+0x7a/0x90 [ 557.554853][T21007] do_syscall_64+0x174/0x580 [ 557.559982][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.566423][T21007] [ 557.566423][T21007] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 557.574184][T21007] lock_sock_nested+0x41/0x100 [ 557.579492][T21007] inet_shutdown+0x6a/0x390 [ 557.584574][T21007] nbd_mark_nsock_dead+0x2cb/0x550 [ 557.590329][T21007] recv_work+0x1cee/0x1e10 [ 557.595321][T21007] process_scheduled_works+0xa8e/0x14e0 [ 557.601436][T21007] worker_thread+0xa47/0xfb0 [ 557.606573][T21007] kthread+0x388/0x470 [ 557.611189][T21007] ret_from_fork+0x514/0xb70 [ 557.616346][T21007] ret_from_fork_asm+0x1a/0x30 [ 557.621661][T21007] [ 557.621661][T21007] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 557.629421][T21007] __mutex_lock+0x19d/0x1550 [ 557.634615][T21007] nbd_queue_rq+0x373/0x1150 [ 557.639753][T21007] blk_mq_dispatch_rq_list+0x499/0x1990 [ 557.645943][T21007] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 557.652880][T21007] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 557.659493][T21007] blk_mq_run_work_fn+0x16c/0x300 [ 557.665077][T21007] process_scheduled_works+0xa8e/0x14e0 [ 557.671172][T21007] worker_thread+0xa47/0xfb0 [ 557.676313][T21007] kthread+0x388/0x470 [ 557.680923][T21007] ret_from_fork+0x514/0xb70 [ 557.686055][T21007] ret_from_fork_asm+0x1a/0x30 [ 557.691361][T21007] [ 557.691361][T21007] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 557.698607][T21007] __mutex_lock+0x19d/0x1550 [ 557.703745][T21007] nbd_queue_rq+0xc1/0x1150 [ 557.708787][T21007] blk_mq_dispatch_rq_list+0x499/0x1990 [ 557.714884][T21007] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 557.721747][T21007] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 557.728269][T21007] blk_mq_run_work_fn+0x16c/0x300 [ 557.733838][T21007] process_scheduled_works+0xa8e/0x14e0 [ 557.739930][T21007] worker_thread+0xa47/0xfb0 [ 557.745071][T21007] kthread+0x388/0x470 [ 557.749678][T21007] ret_from_fork+0x514/0xb70 [ 557.754809][T21007] ret_from_fork_asm+0x1a/0x30 [ 557.760117][T21007] [ 557.760117][T21007] -> #3 (set->srcu){.+.+}-{0:0}: [ 557.767265][T21007] __synchronize_srcu+0xc9/0x2f0 [ 557.772806][T21007] elevator_switch+0x1e8/0x7b0 [ 557.778284][T21007] elevator_change+0x2fa/0x480 [ 557.783599][T21007] elevator_set_default+0x375/0x440 [ 557.789347][T21007] blk_register_queue+0x3f3/0x4e0 [ 557.795028][T21007] __add_disk+0x6cb/0xe30 [ 557.799948][T21007] add_disk_fwnode+0xfb/0x4b0 [ 557.805167][T21007] nbd_dev_add+0x733/0xb60 [ 557.810127][T21007] nbd_init+0x15f/0x1e0 [ 557.814900][T21007] do_one_initcall+0x250/0x870 [ 557.820205][T21007] do_initcall_level+0x10a/0x1a0 [ 557.825876][T21007] do_initcalls+0x59/0xa0 [ 557.830751][T21007] kernel_init_freeable+0x29d/0x3e0 [ 557.836497][T21007] kernel_init+0x1d/0x1d0 [ 557.841377][T21007] ret_from_fork+0x514/0xb70 [ 557.846526][T21007] ret_from_fork_asm+0x1a/0x30 [ 557.851871][T21007] [ 557.851871][T21007] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 557.859716][T21007] __mutex_lock+0x19d/0x1550 [ 557.864847][T21007] elevator_change+0x1af/0x480 [ 557.870160][T21007] elevator_set_none+0xb5/0x140 [ 557.875558][T21007] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 557.881923][T21007] nbd_start_device+0x189/0xb30 [ 557.887342][T21007] nbd_genl_connect+0x1597/0x1c10 [ 557.892963][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 557.892914][T21007] genl_family_rcv_msg_doit+0x233/0x340 [ 557.906122][T21007] genl_rcv_msg+0x614/0x7a0 [ 557.911190][T21007] netlink_rcv_skb+0x226/0x4a0 [ 557.916507][T21007] genl_rcv+0x28/0x40 [ 557.921041][T21007] netlink_unicast+0x7bb/0x940 [ 557.926348][T21007] netlink_sendmsg+0x813/0xb40 [ 557.931650][T21007] sock_sendmsg_nosec+0x13a/0x180 [ 557.937392][T21007] ____sys_sendmsg+0x54e/0x850 [ 557.942693][T21007] ___sys_sendmsg+0x2a5/0x360 [ 557.947917][T21007] __x64_sys_sendmsg+0x1b1/0x290 [ 557.953401][T21007] do_syscall_64+0x174/0x580 [ 557.958536][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.964969][T21007] [ 557.964969][T21007] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 557.973626][T21007] blk_alloc_queue+0x544/0x690 [ 557.978939][T21007] __blk_mq_alloc_disk+0x194/0x390 [ 557.984590][T21007] nbd_dev_add+0x494/0xb60 [ 557.989555][T21007] nbd_init+0x15f/0x1e0 [ 557.994252][T21007] do_one_initcall+0x250/0x870 [ 557.999567][T21007] do_initcall_level+0x10a/0x1a0 [ 558.005084][T21007] do_initcalls+0x59/0xa0 [ 558.009962][T21007] kernel_init_freeable+0x29d/0x3e0 [ 558.015701][T21007] kernel_init+0x1d/0x1d0 [ 558.020573][T21007] ret_from_fork+0x514/0xb70 [ 558.025700][T21007] ret_from_fork_asm+0x1a/0x30 [ 558.031010][T21007] [ 558.031010][T21007] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 558.038243][T21007] __lock_acquire+0x1520/0x2cf0 [ 558.043666][T21007] lock_acquire+0x106/0x350 [ 558.048712][T21007] fs_reclaim_acquire+0x71/0x100 [ 558.054190][T21007] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 558.060543][T21007] __alloc_skb+0x1d7/0x7a0 [ 558.065505][T21007] tcp_stream_alloc_skb+0x3f/0x580 [ 558.071262][T21007] tcp_connect+0x1582/0x53e0 [ 558.076455][T21007] tcp_v6_connect+0x14ed/0x1cf0 [ 558.081895][T21007] __inet_stream_connect+0x258/0xe00 [ 558.087723][T21007] inet_stream_connect+0x66/0xa0 [ 558.093214][T21007] kernel_connect+0x141/0x1c0 [ 558.098439][T21007] rds_tcp_conn_path_connect+0x6e9/0x920 [ 558.104708][T21007] rds_connect_worker+0x1d8/0x290 [ 558.110358][T21007] process_scheduled_works+0xa8e/0x14e0 [ 558.116447][T21007] worker_thread+0xa47/0xfb0 [ 558.121585][T21007] kthread+0x388/0x470 [ 558.126196][T21007] ret_from_fork+0x514/0xb70 [ 558.131328][T21007] ret_from_fork_asm+0x1a/0x30 [ 558.136639][T21007] [ 558.136639][T21007] other info that might help us debug this: [ 558.136639][T21007] [ 558.146889][T21007] Chain exists of: [ 558.146889][T21007] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 558.146889][T21007] [ 558.159865][T21007] Possible unsafe locking scenario: [ 558.159865][T21007] [ 558.167329][T21007] CPU0 CPU1 [ 558.172717][T21007] ---- ---- [ 558.178159][T21007] lock(k-sk_lock-AF_INET6); [ 558.182863][T21007] lock(sk_lock-AF_INET6); [ 558.189970][T21007] lock(k-sk_lock-AF_INET6); [ 558.197228][T21007] lock(fs_reclaim); [ 558.201241][T21007] [ 558.201241][T21007] *** DEADLOCK *** [ 558.201241][T21007] [ 558.209401][T21007] 4 locks held by kworker/u8:26/21007: [ 558.214880][T21007] #0: ffff88804074c940 ((wq_completion)krds_cp_wq#13/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 558.226679][T21007] #1: ffffc90004a3fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 558.239500][T21007] #2: ffff8880694bf980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 558.250589][T21007] #3: ffff888056ab60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 558.260728][T21007] [ 558.260728][T21007] stack backtrace: [ 558.266644][T21007] CPU: 1 UID: 0 PID: 21007 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 558.266667][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 558.266679][T21007] Workqueue: krds_cp_wq#13/0 rds_connect_worker [ 558.266703][T21007] Call Trace: [ 558.266710][T21007] [ 558.266717][T21007] dump_stack_lvl+0xe8/0x150 [ 558.266739][T21007] print_circular_bug+0x2e1/0x300 [ 558.266764][T21007] check_noncircular+0x12e/0x150 [ 558.266788][T21007] __lock_acquire+0x1520/0x2cf0 [ 558.266809][T21007] ? __lock_acquire+0x683/0x2cf0 [ 558.266832][T21007] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 558.266857][T21007] lock_acquire+0x106/0x350 [ 558.266874][T21007] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 558.266902][T21007] ? ip6_dst_check+0xe2/0x7e0 [ 558.267025][T21007] fs_reclaim_acquire+0x71/0x100 [ 558.267040][T21007] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 558.267066][T21007] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 558.267092][T21007] ? ip6_default_advmss+0x80/0x3b0 [ 558.267108][T21007] ? __alloc_skb+0x1d7/0x7a0 [ 558.267123][T21007] ? __alloc_skb+0x1d7/0x7a0 [ 558.267140][T21007] __alloc_skb+0x1d7/0x7a0 [ 558.267156][T21007] tcp_stream_alloc_skb+0x3f/0x580 [ 558.267174][T21007] ? __asan_memset+0x22/0x50 [ 558.267200][T21007] tcp_connect+0x1582/0x53e0 [ 558.267235][T21007] ? ktime_get_with_offset+0x93/0x2d0 [ 558.267261][T21007] ? __pfx_tcp_connect+0x10/0x10 [ 558.267287][T21007] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 558.267315][T21007] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.267340][T21007] ? ktime_get_with_offset+0x93/0x2d0 [ 558.267356][T21007] ? seqcount_lockdep_reader_access+0xea/0x100 [ 558.267386][T21007] ? __asan_memset+0x22/0x50 [ 558.267412][T21007] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 558.267461][T21007] ? inet6_hash_connect+0xeb/0x170 [ 558.267507][T21007] tcp_v6_connect+0x14ed/0x1cf0 [ 558.267524][T21007] ? inet_csk_bind_conflict+0x60/0xa40 [ 558.267556][T21007] ? __pfx_tcp_v6_connect+0x10/0x10 [ 558.267573][T21007] ? inet_csk_get_port+0x11bc/0x1740 [ 558.267598][T21007] ? __local_bh_enable_ip+0xd0/0x130 [ 558.267628][T21007] ? __bfs+0x153/0x290 [ 558.267644][T21007] ? __bfs+0x153/0x290 [ 558.267662][T21007] __inet_stream_connect+0x258/0xe00 [ 558.267691][T21007] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.267714][T21007] ? lock_sock_nested+0x6a/0x100 [ 558.267738][T21007] ? __pfx___inet_stream_connect+0x10/0x10 [ 558.267765][T21007] ? inet_stream_connect+0x51/0xa0 [ 558.267791][T21007] ? __local_bh_enable_ip+0xd0/0x130 [ 558.267817][T21007] inet_stream_connect+0x66/0xa0 [ 558.267844][T21007] kernel_connect+0x141/0x1c0 [ 558.267866][T21007] ? __pfx_kernel_connect+0x10/0x10 [ 558.267893][T21007] ? __local_bh_enable_ip+0xd0/0x130 [ 558.267919][T21007] rds_tcp_conn_path_connect+0x6e9/0x920 [ 558.267946][T21007] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 558.267975][T21007] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 558.267999][T21007] ? process_scheduled_works+0xa20/0x14e0 [ 558.268025][T21007] ? process_scheduled_works+0xa20/0x14e0 [ 558.268052][T21007] rds_connect_worker+0x1d8/0x290 [ 558.268069][T21007] ? process_scheduled_works+0xa20/0x14e0 [ 558.268092][T21007] process_scheduled_works+0xa8e/0x14e0 [ 558.268129][T21007] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.268156][T21007] ? assign_work+0x3cf/0x5d0 [ 558.268180][T21007] worker_thread+0xa47/0xfb0 [ 558.268211][T21007] ? __kthread_parkme+0x71/0x1f0 [ 558.268241][T21007] kthread+0x388/0x470 [ 558.268259][T21007] ? __pfx_worker_thread+0x10/0x10 [ 558.268283][T21007] ? __pfx_kthread+0x10/0x10 [ 558.268301][T21007] ret_from_fork+0x514/0xb70 [ 558.268321][T21007] ? __pfx_ret_from_fork+0x10/0x10 [ 558.268339][T21007] ? __switch_to+0xc89/0x1420 [ 558.268366][T21007] ? __pfx_kthread+0x10/0x10 [ 558.268384][T21007] ret_from_fork_asm+0x1a/0x30 [ 558.268412][T21007] [ 558.652335][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.684931][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.693634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.734431][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.743164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.778709][T10028] net_ratelimit: 2 callbacks suppressed [ 560.778729][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.793124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.851059][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 561.732372][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.812501][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.820999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.851209][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.859648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.892750][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.901269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.772751][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.981251][T10039] net_ratelimit: 4 callbacks suppressed [ 565.981271][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.995266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.013493][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.021862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog